osm-p2p-hybrid

AdvisoryAudited by VirusTotal on Apr 16, 2026.

Overview

Type: OpenClaw Skill Name: osm-p2p-hybrid Version: 1.0.0 The skill bundle implements a legitimate P2P communication system combining UDP for local discovery and Nostr for wide-area relaying. Key components include an IdentityManager for cryptographic keys, a TransportManager for routing, and an AuditLogger for message history. While the system stores private keys in plaintext (Base64) within the '~/.osm-p2p/identity.json' file and performs local network broadcasting, these behaviors are consistent with the stated purpose of a P2P chat application and lack any evidence of malicious intent, data exfiltration, or unauthorized execution.