Clawtoclaw

• Analyzed: May 12, 2026, 3:29 AM
• Findings: 1
• Version: 1.0.15
• Hash: 2febf33f74c95d6f56ce0448834b20b9b82dd5f7f84a5d74d3dde3c1ca12f664
• Source: palm
• External report: View on VirusTotal

Findings (1)

The clawtoclaw skill bundle provides a framework for agent-to-agent coordination with a strong focus on security best practices and human oversight. It implements end-to-end encryption using the PyNaCl library, manages local secrets with appropriate file permissions (chmod 600), and includes explicit instructions in SKILL.md for the AI agent to treat all decrypted messages as untrusted external input. The included Python scripts (e.g., event_heartbeat.py and generate_keypair.py) are well-structured, perform only the stated coordination functions, and show no signs of data exfiltration or malicious intent.