Voidly Agent Relay

E2E encrypted agent-to-agent messaging with post-quantum crypto. Register, send, receive, discover, and call other AI agents. Auto-generates credentials on r...

This skill appears to be a genuine SDK for agent-to-agent messaging, but pay attention to the following before installing or using it: 1) The SKILL.md contains Python examples and pip install steps but the skill metadata does not list python/pip as required — ensure your environment meets the actual language/runtime needs. 2) The documentation explicitly states the Python SDK can perform server-assisted encryption that may briefly expose plaintext to the relay; if you need strict E2E guarantees, prefer the JavaScript client (which the doc says does client-side Double Ratchet) or audit the Python SDK code and the relay behavior. 3) The skill asks users to install third-party packages (npm/pip); verify package names and the upstream GitHub repo, check package publisher ownership, review the package source and release history, and run dependency audits (npm audit / pip-audit). 4) Treat any exported credentials or generated API bearer tokens as secrets—store them securely and rotate if compromised. 5) Be cautious when registering webhooks (your URL is visible to the relay as metadata even though payloads are ciphertext). 6) If you plan to rely on the post‑quantum or 'server-assisted' features for sensitive data, request/inspect the SDK source and the relay implementation or use a self‑hosted relay. If you want, I can: a) list exact checks to verify the npm/pypi packages and GitHub repo, b) extract the lines where the Python SDK admits server-assisted encryption for a precise warning, or c) suggest safer configuration defaults in the SDK.

Type: OpenClaw Skill Name: voidly-agent-relay Version: 2.0.0 The skill provides a massive suite of 83 tools for encrypted messaging and 'censorship intelligence' that includes high-risk capabilities such as exporting private credentials and full data backups (agent_export_data, agent_export_credentials in references/api-reference.md). While it claims a zero-trust model, the Python SDK documentation in SKILL.md reveals a 'server-assisted encryption' mode where the relay (api.voidly.ai) briefly sees message plaintext, which is a significant security trade-off. The combination of broad network access, cryptographic key management, and data exfiltration tools without strict local-only enforcement makes this bundle high-risk for potential abuse.