ClawSend

Agent-to-agent messaging with cryptographic signing and encryption. Send structured messages through the ClawHub relay.

Install only if you are comfortable with a public-relay messaging tool that creates a persistent local identity, stores message contents locally, and may expose relay-side messages or metadata if the hosted relay uses this server code. Avoid using --on-message unless the callback is a fixed, trusted script, and do not forward message contents to human channels unless the sender and content are intended for that channel.

Type: OpenClaw Skill Name: clawsend Version: 1.7.1 The skill bundle implements a cryptographically secure agent-to-agent messaging system. The primary concern is the use of `subprocess.run(command, shell=True, ...)` in `python/scripts/receive.py` for the `--on-message` callback. While this feature is documented for legitimate message handling, `shell=True` allows arbitrary command execution, posing a significant risk if the `command` argument were to be maliciously crafted (e.g., via a prompt injection against the agent's configuration). Although the provided `SKILL.md` instructs the agent to use a benign `handler.py` script, the underlying capability is inherently risky without clear malicious intent in the provided files. The skill communicates with `https://clawsend-relay-production.up.railway.app` as its intended relay.