Security audit

Hinge Agent - Barney Stinson

Security checks for vulnerabilities and agentic risk

Overview

This skill needs review because it can run autonomous Hinge actions, reuse OpenAI credentials, and store or send sensitive dating data with weak controls.

Install only if you are comfortable with an agent controlling a logged-in Hinge session, potentially sending likes/skips/replies in daemon mode, using OpenAI credentials, and saving dating screenshots/messages locally. Before use, change defaults to queue/read-only behavior, supply a dedicated scoped API key, disable screenshot retention where possible, and regularly delete hinge-data.

A.I.G

Vulnerability Patterns

Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions

Findings (5)

T05 · Unauthorized Access and Privilege Escalation

Error

Location: scripts/session-utils.js:82
Finding: Send-enabled defaults permit account-changing Hinge actions without explicit opt-in
Content: View full analysis
Remediation: View remediation

T05 · Unauthorized Access and Privilege Escalation

Error

Location: scripts/hinge-ai.js:332
Finding: Cross-workspace discovery and use of OpenClaw API credentials
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Error

Location: scripts/hinge-ai.js:1138
Finding: Broad transmission of sensitive dating context and screenshots to OpenAI
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Warning

Location: scripts/discover-autopilot.js:552
Finding: Persistent storage of dating screenshots and behavioral records without retention or access controls
Content: View full analysis
Remediation: View remediation

T08 · Insecure Dependencies

Warning

Location: scripts/hinge-agent-daemon.js:504
Finding: Detached daemon invokes unpinned Appium through npx
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (111)

Tp4

High

Category: MCP Tool Poisoning
Confidence: 94% confidence
Finding: The skill emphasizes live Hinge session operation, but portions of the described functionality are really local queue/database management and staged-message persistence. While less severe than device-control issues, this still understates the amount of sensitive dating data written to disk and may cause users to underestimate persistence and exposure risk.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 98% confidence
Finding: The skill emphasizes live Hinge session operation, but portions of the described functionality are really local queue/database management and staged-message persistence. While less severe than device-control issues, this still understates the amount of sensitive dating data written to disk and may cause users to underestimate persistence and exposure risk.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 92% confidence
Finding: The skill emphasizes live Hinge session operation, but portions of the described functionality are really local queue/database management and staged-message persistence. While less severe than device-control issues, this still understates the amount of sensitive dating data written to disk and may cause users to underestimate persistence and exposure risk.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 98% confidence
Finding: The skill emphasizes live Hinge session operation, but portions of the described functionality are really local queue/database management and staged-message persistence. While less severe than device-control issues, this still understates the amount of sensitive dating data written to disk and may cause users to underestimate persistence and exposure risk.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: The skill emphasizes live Hinge session operation, but portions of the described functionality are really local queue/database management and staged-message persistence. While less severe than device-control issues, this still understates the amount of sensitive dating data written to disk and may cause users to underestimate persistence and exposure risk.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 97% confidence
Finding: The skill emphasizes live Hinge session operation, but portions of the described functionality are really local queue/database management and staged-message persistence. While less severe than device-control issues, this still understates the amount of sensitive dating data written to disk and may cause users to underestimate persistence and exposure risk.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 90% confidence
Finding: The skill emphasizes live Hinge session operation, but portions of the described functionality are really local queue/database management and staged-message persistence. While less severe than device-control issues, this still understates the amount of sensitive dating data written to disk and may cause users to underestimate persistence and exposure risk.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 98% confidence
Finding: The skill emphasizes live Hinge session operation, but portions of the described functionality are really local queue/database management and staged-message persistence. While less severe than device-control issues, this still understates the amount of sensitive dating data written to disk and may cause users to underestimate persistence and exposure risk.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: The skill emphasizes live Hinge session operation, but portions of the described functionality are really local queue/database management and staged-message persistence. While less severe than device-control issues, this still understates the amount of sensitive dating data written to disk and may cause users to underestimate persistence and exposure risk.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 95% confidence
Finding: The skill emphasizes live Hinge session operation, but portions of the described functionality are really local queue/database management and staged-message persistence. While less severe than device-control issues, this still understates the amount of sensitive dating data written to disk and may cause users to underestimate persistence and exposure risk.
Content: No source excerpt is available for this finding.

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 27)May include surrounding context.
md
- `scripts/onboarding.js`

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 28)May include surrounding context.
md
- `scripts/onboarding.js`

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 29)May include surrounding context.
md
- `scripts/onboarding.js`

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 233)May include surrounding context.
md
- `scripts/onboarding.js`

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 30)May include surrounding context.
md
- `scripts/queue.js`

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 194)May include surrounding context.
md
- `scripts/queue.js`

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 196)May include surrounding context.
md
- `scripts/queue.js`

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 197)May include surrounding context.
md
- `scripts/queue.js`

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 32)May include surrounding context.
md
- `scripts/appium-ios.js`

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 234)May include surrounding context.
md
- `scripts/appium-ios.js`

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 34)May include surrounding context.
md
- `scripts/hinge-ios.js`

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 235)May include surrounding context.
md
- `scripts/hinge-ios.js`

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 236)May include surrounding context.
md
- `scripts/hinge-ios.js`

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 36)May include surrounding context.
md
- `scripts/hinge-ai.js`

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 102)May include surrounding context.
md
- `scripts/hinge-ai.js`