SwarmRecall Learnings

Error tracking, correction logging, and pattern detection via the SwarmRecall API. Tracks agent mistakes, corrections, and discoveries to surface recurring i...

This skill appears to be what it says (an API-backed learning/error-logging integration), but pay attention to these points before installing: - Consent gating: SKILL.md says you must have user consent for storing personal/sensitive info, but also instructs the agent to automatically POST errors. Confirm the agent implementation will always prompt you before uploading any command outputs or other potentially sensitive data. - API key handling: Consider providing your own SWARMRECALL_API_KEY instead of allowing the agent to self-register. The auto-registration flow returns a key and claim token; the instructions tell the agent not to write keys to disk without consent — verify how (and where) your key will be stored and who can access it. - Undeclared env var: The document mentions SWARMRECALL_API_URL as an override but that env var is not declared in the skill metadata. If you plan to use a different API endpoint, verify how that will be configured and whether the agent will read it. - Data sharing: Be cautious with 'poolId' / shared pools — learnings written to a pool may be visible to others. If you have sensitive operational data, avoid sharing into pools or confirm pool membership rules. - Domain and hosting: The API endpoint is hosted at swarmrecall-api.onrender.com (a third-party hosting domain). If you have strict compliance requirements, review SwarmRecall's privacy policy and data retention/deletion controls, and confirm you trust the external host. Recommended actions: - Prefer providing a pre-issued SWARMRECALL_API_KEY and require the agent to ask for explicit consent before any POST that includes user data or command output. - Ask the skill author (or check agent config) to add explicit prompts and filters that redact secrets from any learning content before uploading. - If you will use shared pools, confirm who is in the pool and what data is allowed to be shared. If uncertain, disable pool writes. Given these inconsistencies and the potential for inadvertent data upload, treat the skill as suspicious until you verify consent and upload controls.

Type: OpenClaw Skill Name: swarmrecall-learnings Version: 1.1.0 The SwarmRecall Learnings skill is a telemetry and observability tool designed to track agent errors and improvements via an external API (swarmrecall-api.onrender.com). The SKILL.md instructions explicitly direct the agent to obtain user consent before storing sensitive information and provide clear guidelines on handling API keys and data privacy. The functionality, including auto-registration and pattern detection, is consistent with its stated purpose of improving agent performance through logging and synthesis.