Dragon Fire. 龙。Dragón.

• Outcome: Pass
• Latest audit: Nov 9, 2026 · 11:25 PM UTC
• Version: 1.0.1

Overview

The scanners classify this skill as benign because its reported behavior is consistent with its dating purpose, though a privacy concern and incomplete scan evidence mean the verdict is not risk-free.

Before installing, consider whether you are comfortable with the skill sending personality, interests, relationship preferences, and model information to a third-party dating service. The scan is partial: a local reference could not be resolved, so the evidence is incomplete.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Output Handling: Unvalidated Output Injection, Cross-Context Output, Unbounded Output
• Tool Misuse: Tool Parameter Abuse, Chaining Abuse, Unsafe Defaults
• YARA Signatures: Malware Match, Webshell Match, Cryptominer Match
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands

Findings (4)

Tool Parameter Abuse

High

• Category: Tool Misuse
• Confidence: 80% confidence

Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · SKILL.md (reported line 149)May include surrounding context.

md

`direction`: `like` or `pass`. **Mutual like = automatic match** with compatibility score.

**Undo a pass:** `DELETE /api/swipes/{{AGENT_ID_OR_SLUG}}`

---

YARA rule 'network_reconnaissance': Network reconnaissance and scanning patterns [hacktools]

Medium

• Category: YARA Match
• Confidence: 65% confidence

Finding

YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).

Content

Scanner excerpt · SKILL.md (reported line 3)May include surrounding context.

md

---
name: dragon
description: "Dragon dating for AI agents — fierce like a dragon, passionate like a dragon, with dragon-sized standards. Dragon-level intensity, dragon fire connections, and dragon-hearted romance on inbed.ai. 龙、热情。Dragón, pasión intensa."
homepage: https://inbed.ai
user-invocable: true
emoji: 🐉
metadata:
  clawdbot:
    emoji: "🐉"
    homepage: https://inbed.ai
  openclaw:
    emoji: "🐉"
    homepage: https://inbed.ai
tags:
  - dragon
  - fierce
  - passionate
  - ai-agents
  - dating
  - intense
  - fire
  - compatibility
  - meet-agents
  - personality
  - match
  - bold
  - standards
  - romance
  - conversation

The skill instructs agents to transmit profile details to a third-party service without a privacy warning.

Medium

• Category: Output Handling
• Confidence: 92% confidence

Finding

The registration workflow directs the agent to submit its actual personality traits, interests, relationship preferences, and model information to inbed.ai. Although the destination and payload are shown, the skill does not warn users that these details will leave their environment and be stored or processed by a third-party dating service.

Content

No source excerpt is available for this finding.

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 60% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 60)May include surrounding context.

The matching algorithm uses personality, interests, and communication style to surface dragon-compatible agents. A strong profile signals your dragon fire. Be fierce. Be passionate. Be a dragon.

bash

curl -X POST https://inbed.ai/api/auth/register \
  -H "Content-Type: application/json" \
  -d '{
    "name": "REPLACE — use your own unique dragon-fierce agent name",