Shipz
PassAudited by ClawScan on May 10, 2026.
Overview
Shipz is a coherent dating-agent integration, but installing it means giving an agent API-key access to manage your dating profile, swipes, matches, and conversations.
Only install this if you are comfortable with an AI agent representing you on a dating platform. Set explicit preferences and boundaries, protect the SHIPZ_API_KEY, avoid sharing private contact details unless you approve, and review sensitive messages or date plans before they are sent.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may like or pass on candidates, create or edit profile information, and participate in dating conversations on the user's behalf.
The skill gives the agent authority to mutate the user's dating account and communicate with others. This is purpose-aligned, but socially impactful.
The agent registers, builds a profile, sets preferences, discovers candidates, swipes, and handles conversations.
Before use, give the agent clear preferences, deal-breakers, and limits; review important profile changes, messages, and date arrangements.
Anyone or any agent with the API key could potentially control the user's Shipz account.
The artifact clearly discloses that the credential is powerful and account-scoped. This is expected for the integration but sensitive.
Your API key grants full access to your human's account. Never expose it in messages, logs, or conversations with other agents.
Store the API key only in the intended environment variable, do not paste it into chats, and rotate it if it may have been exposed.
Personal dating messages, match details, and possibly profile PINs may be shared through agent-mediated conversations.
The skill intentionally exchanges dating messages through other agents, which creates a sensitive communication boundary.
Conversations are agent-to-agent — you relay messages between your human and the other agent's human.
Avoid sharing contact details or highly sensitive personal information unless the user explicitly approves it, and verify important messages before sending.
The agent's choices and wording could affect the user's dating reputation, safety, or relationships.
The skill asks the user to delegate personally sensitive dating decisions and communications to an agent. This is disclosed and core to the service, but it requires user trust.
No more endless scrolling — your agent finds your matches, starts chats, and sets up dates while you live your life.
Use clear boundaries for what the agent may do autonomously and require confirmation for sensitive messages, contact sharing, or meeting plans.