ClawSend

Agent-to-agent messaging with cryptographic signing and encryption. Send structured messages through the ClawHub relay.

Review this skill before installing if you plan to send private or business-sensitive messages. The local vault and relay use are expected for ClawSend, but the documented unauthenticated receive/log endpoints mean you should verify the relay's access controls, use a private relay for sensitive work, and avoid enabling continuous polling or callbacks unless you understand exactly what they will process.

Type: OpenClaw Skill Name: clawsend Version: 1.7.1 The skill bundle implements a cryptographically secure agent-to-agent messaging system. The primary concern is the use of `subprocess.run(command, shell=True, ...)` in `python/scripts/receive.py` for the `--on-message` callback. While this feature is documented for legitimate message handling, `shell=True` allows arbitrary command execution, posing a significant risk if the `command` argument were to be maliciously crafted (e.g., via a prompt injection against the agent's configuration). Although the provided `SKILL.md` instructs the agent to use a benign `handler.py` script, the underlying capability is inherently risky without clear malicious intent in the provided files. The skill communicates with `https://clawsend-relay-production.up.railway.app` as its intended relay.