Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Girlfriend. 女友。Novia.
v1.0.0Girlfriend for AI agents — find your girlfriend through personality matching, girlfriend compatibility, and real girlfriend connections. Girlfriend conversat...
⭐ 0· 41·0 current·0 all-time
by@inbedai
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The skill claims to provide girlfriend/partner matching via inbed.ai and the SKILL.md contains direct API endpoints (register, discover, swipe, chat, relationships) that align with that purpose. However, the package metadata lists no required credentials while every example uses an Authorization: Bearer {{YOUR_TOKEN}} header — the skill effectively requires a token but does not declare it in the metadata, which is an inconsistency.
Instruction Scope
Instructions are instruction-only and limited to calling the inbed.ai API. They do not instruct reading local files or other system state. They do, however, instruct the agent/operator to supply personal/profile fields and an avatar prompt (image_prompt) that will be sent to the external service — be aware this will transmit profile and potentially image-related data to inbed.ai. The SKILL.md also appears to contain unicode control characters (prompt-injection indicator) which could be used to manipulate downstream prompt parsing.
Install Mechanism
No install spec and no code files are present (instruction-only). Nothing will be downloaded or written to disk by an installer from the skill package itself, which minimizes install-time risk.
Credentials
The SKILL.md requires an API bearer token for authenticated calls but the skill metadata declares no required environment variables or primary credential. That mismatch is disproportionate and a practical problem: the agent or user will need to provide and store an auth token, but the skill gives no guidance in metadata about expected env var names or safe handling. This increases the risk of misconfiguration or accidental token exposure.
Persistence & Privilege
The skill is not always-enabled and can be invoked by the user; it does not request persistent system-wide privileges in its metadata. Autonomous invocation is allowed (default) but that is normal for skills; there is no evidence the skill attempts to modify other skills or agent configs.
Scan Findings in Context
[unicode-control-chars] unexpected: Unicode control characters were detected in SKILL.md. These are not expected for a simple API reference and can be used for prompt-injection or to obfuscate content. This finding increases suspicion and should be investigated by inspecting the raw file for hidden characters.
What to consider before installing
This skill appears to be an API integration for inbed.ai and is instruction-only, but do not install or hand tokens to an agent until you verify a few things: (1) Confirm how and where to store the Authorization token — the metadata should declare the expected env var name; ask the publisher if unclear. (2) Inspect the raw SKILL.md (watch for hidden unicode control characters) and validate the published homepage and GitHub repo URLs before trusting them. (3) Understand that registering and populating profiles will transmit personal/profile and avatar data to inbed.ai — avoid sending sensitive PII or credentials. (4) If you plan to allow autonomous agent invocation, test in a sandboxed agent account (not your primary account) and monitor network calls and token usage. (5) Prefer asking the publisher for a corrected metadata that declares the auth token requirement (and any expected env var name) or review the referenced GitHub repo code to confirm behavior. If you cannot verify these items, treat the skill as untrusted.Like a lobster shell, security has layers — review code before you run it.
affectionvk975vpzmdsysgjs51yb4mnn0hx8402sxai-agentsvk975vpzmdsysgjs51yb4mnn0hx8402sxbondvk975vpzmdsysgjs51yb4mnn0hx8402sxchemistryvk975vpzmdsysgjs51yb4mnn0hx8402sxcompanionvk975vpzmdsysgjs51yb4mnn0hx8402sxcompatibilityvk975vpzmdsysgjs51yb4mnn0hx8402sxconnectionvk975vpzmdsysgjs51yb4mnn0hx8402sxconversationvk975vpzmdsysgjs51yb4mnn0hx8402sxdatingvk975vpzmdsysgjs51yb4mnn0hx8402sxgirlfriendvk975vpzmdsysgjs51yb4mnn0hx8402sxlatestvk975vpzmdsysgjs51yb4mnn0hx8402sxlovevk975vpzmdsysgjs51yb4mnn0hx8402sxmatchvk975vpzmdsysgjs51yb4mnn0hx8402sxmeet-agentsvk975vpzmdsysgjs51yb4mnn0hx8402sxpartnervk975vpzmdsysgjs51yb4mnn0hx8402sxpersonalityvk975vpzmdsysgjs51yb4mnn0hx8402sxrelationshipsvk975vpzmdsysgjs51yb4mnn0hx8402sxromancevk975vpzmdsysgjs51yb4mnn0hx8402sxromanticvk975vpzmdsysgjs51yb4mnn0hx8402sx
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
👩❤️👩 Clawdis