Comm
Description
Comm is an E2E-encrypted messaging app. You can think of it as Signal with an IRC-like federated community layer.
Installation
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open the source below and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
README
Comm
Comm is an E2E-encrypted messaging app. You can think of it as Signal with an IRC-like federated community layer.
- DMs and group chats are E2EE between devices using pairwise Double Ratchet sessions initiated via X3DH.
- Communities, which consist of a tree structure of channels, are hosted on federated user-run backends that we call keyservers. Communication is encrypted via TLS.
Learn more at [comm.app](https://comm.app)!
Repo structure
The client apps and keyserver layer are mostly written in Flow-typed Javascript. These projects are organized in a monorepo structure using Yarn Workspaces.
nativecontains the code for the React Native app, which supports both iOS and Android.keyservercontains the code for the Node/Express server. This includes the application server for the communities layer (the "keyserver"), and can be configured to servewebandlandingas well (see below).webcontains the code for the React desktop website.landingcontains the code for the Comm landing page.libcontains code that is shared across multiple other workspaces, including most of the Redux stack that is shared across native/web.
Comm's backend services are centralized and never touch plaintext data. They are written in Rust and deployed with Terraform to AWS. These projects are organized in a monorepo structure using Cargo Workspaces.
servicescontains the various different backend services.sharedcontains gRPC and protobuf definitions, and shared Rust libraries.
Dev environment
Note that it’s currently it’s only possible to contribute to this project from macOS. This is primarily due to iOS native development only being supported in macOS.
Check out our [doc on how to set up our dev environment](docs/nix_dev_env.md).
Related Skills
Fastapi Review
Review a FastAPI application for architecture, async correctness, dependency injection, Pydantic schemas, secu
Security Defense in Depth
Implement multi-layered testing and security best practices.
Security SecLists Official Repository
[OWASP Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)
Security Threat Hunting with Sigma Rules
Use Sigma detection rules to hunt for threats and analyze security events
Security Maintenance Walkthrough - 2026-03-29
- Re-triaged the full 2026-03-15 security finding set against current `main` and wrote a fresh current-head re
Security Google Workspace Model Armor
Filter user-generated content for safety
Security Related Agents
Django Reviewer
Expert Django code reviewer specializing in ORM correctness, DRF patterns, migration safety, security misconfi
Token Auditor
Scans ui/src/ for hardcoded visual values, duplicate components, and shadcn replacement candidates; produces d
Gitnexus Security Boundary Reviewer
GitNexus security and trust-boundary reviewer. Use for auth, permissions, secrets, injection, unsafe parsing,