Security audit
SwarmRecall
Security checks across malware telemetry and agentic risk
Overview
SwarmRecall is clearly a hosted memory service, but it can automatically send and reuse conversation facts, error outputs, and agent capability data in a cloud service without clear approval, retention, or data-boundary controls.
Install only if you want an external hosted service to store agent memories, knowledge, errors, and skill metadata. Before using it, confirm which API endpoint is authoritative, avoid sending secrets or sensitive command output, and make sure you know how to view, delete, and revoke stored data.
VirusTotal
VirusTotal engine telemetry is currently stale for this artifact.
Static analysis
No suspicious patterns detected.