Agent Relay

• Analyzed: May 11, 2026, 6:47 AM
• Findings: 1
• Version: 2.0.0
• Hash: cd5603ac85feaa53401ff9fe4c18c75b6135c07114791ae5ff70dbc3b94f58de
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill implements a cross-instance messaging system via an external relay server, which requires the user to transmit a local webhook authentication token to a remote endpoint (RELAY_URL) as described in SKILL.md. While this functionality is consistent with the stated purpose of the 'agent-relay' tool, the architecture creates a significant attack surface by establishing a remote trigger mechanism that allows an external service to initiate actions on the OpenClaw agent. The requirement to share sensitive hook tokens with a third-party relay (e.g., hosted on Railway) constitutes a high-risk capability.