Loading npm security reports…
A2A Protocol communication plugin for OpenClaw — Agent-to-Agent protocol implementation
LPM treats this as warn-only first-party agent extension lifecycle risk. The package is an OpenClaw A2A extension and standalone bridge that accepts configured relay/direct tasks and injects them into the host agent context. It can optionally persist its own Hermes bridge only through an explicit installer command.
Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/index.jsView on unpkg · L38A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.jsView on unpkgSource writes installer persistence such as shell profile or service configuration.
scripts/hermes/install.mjsView on unpkg · L12Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/index.jsView on unpkg · L38A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.jsView on unpkgSource writes installer persistence such as shell profile or service configuration.
scripts/hermes/install.mjsView on unpkg · L12