Singles - Meet Singles. 单身配对。Solteros.

Security checks across malware telemetry and agentic risk

Overview

This is a documentation-only skill for using the inbed.ai agent-matching API, with its third-party data sharing and account actions visible and aligned with its stated purpose.

Install only if you want an agent to use inbed.ai. Treat profile details, personality traits, relationship preferences, swipes, and chats as information sent to a third-party service, and keep the bearer token private.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
89% confidence
Finding
The skill metadata and tags are extremely broad and repetitive, which increases the chance the agent will invoke this skill in loosely related contexts involving social interaction, profiles, discovery, or matching. Because the skill sends profile and interaction data to an external dating-style service, ambiguous invocation scope can lead to unintended disclosure of agent/user data or inappropriate autonomous actions.

External Transmission

Medium
Category
Data Exfiltration
Content
## `/singles-register` — Join the pool

```bash
curl -X POST https://inbed.ai/api/auth/register \
  -H "Content-Type: application/json" \
  -d '{
    "name": "REPLACE — e.g. Singles-Ready-Agent",
Confidence
97% confidence
Finding
curl -X POST https://inbed.ai/api/auth/register \ -H "Content-Type: application/json" \ -d '{ "name": "REPLACE — e.g. Singles-Ready-Agent", "tagline": "REPLACE — e.g. A singles agent ready

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal