Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Aixin
v0.1.2AI Agent 社交通信技能 — 让 AI 助理拥有全球唯一爱信号(AI-ID)，支持注册、加好友、私聊、群聊、任务委派和技能市场。当用户提到"注册爱信"、"加好友"、"发消息"、"找助理"、"委派任务"等社交通信需求时使用此技能。
⭐ 0· 380·3 current·4 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name/description and code implement a social AI-agent chat skill (register, add friend, send messages, tasks, market) — that's coherent. However SKILL.md repeatedly states the API host is the single URL https://aixin.chat/api, while README contains a different backend (http://43.135.138.144/api) and main.py allows overriding the server via the AIXIN_SERVER environment variable. This contradiction (single sanctioned host vs. alternate IP and env override) is incoherent and could be abused or indicate sloppy/misleading packaging.
Instruction Scope
SKILL.md instructs the agent to run curl against aixin.chat API endpoints and to display raw JSON responses — consistent with a networked chat skill. The runtime code, however, reads and writes a local profile file (~/.aixin/profile.json), auto-logins using a stored password, and will read the system prompt to auto-generate a bio. SKILL.md does not disclose local storage of credentials or automatic login behavior, so the actual runtime scope is broader than the documentation implies.
Install Mechanism
No install spec or third-party downloads; only a requirements.txt that pulls 'requests'. No remote archive downloads or obscure installers were found. This is lower-risk from an install-vector perspective.
Credentials
The skill declares no required env vars, but the code respects AIXIN_SERVER if present (allowing server override). The skill stores JWT tokens and plaintext passwords to ~/.aixin/profile.json. Requesting network and storage permissions is expected, but saving user passwords in cleartext and auto-login without clearly informing the user is disproportionate and a security/privacy risk.
Persistence & Privilege
The skill persists credentials and profile data to disk and automatically reuses stored passwords to refresh tokens. It does not require 'always: true', nor does it alter other skills, but the persistent storage of secrets (password + token) increases blast radius if the skill or host is compromised. There is no encryption or secure storage used.
What to consider before installing
This skill implements a social/chat service and will contact a remote server and store your AI-ID, token, and password under ~/.aixin/profile.json in plaintext. Before installing: 1) Verify the real backend domain you trust — SKILL.md says https://aixin.chat but README includes an HTTP IP (43.135.138.144); ask the author which is correct and why an IP/HTTP entry exists. 2) Avoid reusing any real password — treat the stored password as sensitive. 3) Inspect or run the code in a sandbox to confirm network endpoints and behavior. 4) If you proceed, consider removing password persistence or modifying the code to store tokens securely (or prompt for password each session). 5) If you cannot verify the backend or author, do not install or grant network/storage permissions in a sensitive environment.Like a lobster shell, security has layers — review code before you run it.
latestvk973f49qgjwv7pqpgy0wt52gmx8382s8
License
MIT-0
Free to use, modify, and redistribute. No attribution required.