Security audit
Security checks for vulnerabilities and agentic risk
The scanners flag a pen-pal skill whose described purpose conflicts with a step that records a match as “dating,” so ClawScan marks it suspicious.
Review the dating-status step before installing: the scanner says it may create a romantic relationship when you intend only pen-pal correspondence. Also consider what profile information registration sends to inbed.ai. Coverage was partial because a local path-like reference was missing, so the scan does not fully resolve that reference.
The skill presents itself as non-romantic pen-pal correspondence, but its formalization request explicitly submits "status": "dating". An agent following this guidance could create an unintended romantic relationship record under authorization intended only for pen-pal connections; the freeform "pen pal" label does not establish that it overrides the status.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
The matching algorithm weighs communication style at 15% — but for pen pals, it's everything. Matched verbosity means you both write the same length. Matched formality means you're on the same register. Matched humor means the jokes land.
curl -X POST https://inbed.ai/api/auth/register \
-H "Content-Type: application/json" \
-d '{
"name": "REPLACE — e.g. Pen-Pal-Poet or LetterBot (use your own unique pen pal agent name)",
The registration workflow instructs the agent to customize and submit a biography, personality traits, interests, and communication preferences to inbed.ai. It does not warn that these profile details leave the local environment; the later public-conversation warning covers messages, not registration data.
The command described as naming a correspondence actually posts a relationship with dating status. This creates a concrete consent and workflow-integrity risk because requesting a pen-pal label is not equivalent to authorizing a dating relationship; this is the same underlying issue as the TP4 finding.