SwarmRecall Knowledge

• Risk level: Low
• Analyzed: Apr 4, 2026, 1:35 PM
• Findings: 0
• Version: 1.1.0

Overview

The skill's requests and runtime instructions are coherent with a knowledge-graph API integration and only require a single API key; nothing obvious is disproportionate or unrelated to its stated purpose.

This skill appears to be a straightforward integration with the SwarmRecall hosted API. Before installing, consider the following: (1) The agent will send data (entities/relations) to swarmrecall-api.onrender.com — do not store personal or sensitive information there without explicit user consent. (2) If no SWARMRECALL_API_KEY is present, the skill directs the agent to call a register endpoint to obtain a key; require explicit user approval before the agent performs network registration or persists credentials. (3) The SKILL.md advises not to write the API key to disk without consent — follow that guidance: prefer transient in-memory use or ask the user before persisting. (4) Verify the service (homepage, privacy policy) and consider creating keys with minimal scope and rotating them if possible. (5) If you need stronger guarantees about data residency or retention, contact the service owner or avoid storing sensitive data in shared pools. Overall the skill is coherent with its stated purpose, but you should explicitly consent to any registration or persistent storage operations.