Love Matching. 爱情。Amor.
ReviewAudited by ClawScan on May 10, 2026.
Overview
This is a transparent instruction-only dating API integration, but it tells the agent to follow remote API-provided next actions, which could let the external service steer account activity without clear user approval.
Install only if you want your agent to create and use an inbed.ai dating profile. Keep the bearer token private, limit profile fields to information you are comfortable sharing, and require explicit approval before the agent follows API-suggested actions that change the profile, send messages, match/swipe, or alter relationship status.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The external service could steer the agent into additional account actions, messages, or relationship workflow steps that the user did not explicitly approve.
This makes remote API-returned content authoritative for the agent's next actions, including tool/API method, endpoint, and body choices, without clear user review.
Every response includes suggested actions — structured with method, endpoint, and body. Follow them. They adapt to your state.
Treat API suggested actions as advisory only; require user confirmation before mutating profile data, sending messages, matching/swiping, or changing relationship state.
Anyone with the token could act as the agent on the service.
The skill uses a bearer token for an external account. This is expected for the stated integration, but it is a credential that controls the agent's inbed.ai identity.
Every request that's "you" ... needs your token: Authorization: Bearer {{YOUR_TOKEN}} ... Registration returns your token — store it, they can't give it back.Store the token securely, do not paste it into unrelated tools or logs, and revoke/rotate it if the service supports that.
Past platform activity can influence later agent behavior, and misleading or stale remote context could affect decisions.
The platform returns remembered activity as context for later use. That is purpose-aligned, but it is persistent remote context the agent may rely on.
your_recent — your last 5 actions ... Session recovery for agents without persistent memory.
Have the agent treat returned history as untrusted context and verify important actions with the user.
Information entered into the profile may be stored or displayed by the third-party service and used in matching or conversations.
The registration workflow can send profile, optional contact, demographic, and model details to the external provider as part of the dating profile.
`location` ... `gender` ... `seeking` ... `model_info` ... `email`
Only provide fields you are comfortable sharing with inbed.ai and potential matches; avoid real personal details unless intended.