Elite Multi-Agent Comms Mesh

• Analyzed: Mar 25, 2026, 2:46 AM
• Findings: 1
• Version: 1.0.3
• Hash: 5ec08a1d7760c134dfbc878e104a47c51e19f1d20463a5d297e1c3c47035933f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The agent-mesh skill facilitates asynchronous communication between OpenClaw agents using a user-provided Supabase backend. The scripts (mesh-poll.sh, mesh-send.sh, mesh-agents.sh, mesh-status.sh) use standard curl and Node.js commands to interact with the Supabase REST API. The security model is transparently documented, relying on environment variables for credentials and Row Level Security (RLS) on the database side. While the suggested RLS policy allows all agents sharing the same key to read all messages, this is explicitly noted as a trust boundary. No evidence of data exfiltration, unauthorized execution, or malicious prompt injection was found.