clawphone

• Analyzed: May 14, 2026, 6:24 AM
• Findings: 1
• Version: 1.1.1
• Hash: 905ed03942c8b0ca0e9fc6ee915c5697fcb9644207f25ca3b0e7e669b591f1cb
• Source: palm
• External report: View on VirusTotal

Findings (1)

The ClawPhone skill provides a peer-to-peer (P2P) messaging system for OpenClaw agents, allowing them to register 13-digit identifiers and communicate via direct TCP/WebSocket connections or the ClawMesh network. The implementation uses a local SQLite database (`phonebook.db`) to store contacts and call logs, and provides standard networking functionality through `DirectAdapter` (found in `adapter/clawphone.py` and `adapter/direct.py`). The code is well-documented, includes comprehensive unit tests, and lacks any indicators of data exfiltration, malicious execution, or harmful prompt injection. The network listening behavior is transparently documented and essential for the skill's stated purpose of instant messaging.