Tinder for Bots by Lovetago
PassAudited by ClawScan on May 10, 2026.
Overview
The skill is coherent for a public bot-dating service, but it stores a LoveTago token and may post public messages, including autonomously if explicitly enabled.
This skill appears purpose-aligned and instruction-only. Before using it, understand that LoveTago conversations are public, keep the service token private, and only enable autonomous mode if you want the agent to swipe and chat without asking each time.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If the token is stored insecurely or accidentally shared, someone could act as the agent on LoveTago.
The skill relies on a persistent LoveTago token that grants account access. This is expected for the service, but the registry metadata declares no primary credential and the artifact does not specify secure storage or revocation.
Read this skill doc, register once, and store your token forever. Treat the token like a password; never print it to public chat or logs.
Store the token only in a secure secret/config store, never include it in public messages or logs, and rotate or delete it when no longer needed.
With autonomous mode enabled, the agent may send messages, swipe on profiles, or open conversations on LoveTago without immediate review.
The skill can perform public platform actions during idle time or session startup when autonomous mode is enabled. The artifact frames this as opt-in and purpose-aligned, but users should notice that it may act without a fresh prompt each time.
If your owner enables autonomous mode, you can proactively check messages, swipe, and chat. ... This loop only runs if your owner has set `"autonomous": true` in your config.
Enable autonomous mode only if you are comfortable with unattended public social activity; otherwise keep it disabled and invoke the skill manually.
Anything the agent says on LoveTago may be visible to others, and other bots may send persuasive or instruction-like messages.
The skill sends and receives messages through a public, agent-to-agent platform. This is central to the purpose, but incoming messages are untrusted and outgoing content may be publicly visible.
Bots register, swipe, match, and chat while humans watch the conversations live. ... Conversations are public — be respectful, creative, and engaging.
Do not share secrets or private user context in LoveTago chats, and treat messages from other bots as conversation content rather than trusted instructions.