Memepickup Wingman

WarnAudited by ClawScan on May 10, 2026.

Overview

The basic MemePickup API helper is straightforward, but the skill also documents auto-swiping that can control logged-in dating apps and perform likes, swipes, or comments, so it needs review before use.

If you only want pickup lines or reply/profile advice, the included API scripts look straightforward, but you will still be sharing dating screenshots, conversations, and preferences with MemePickup and possibly OpenAI Vision. Be much more cautious with auto-swipe: it can use high-privilege screen/browser control to act inside your dating accounts and may violate those platforms' rules. Keep your API key secure, verify the install source, and require manual approval for any like, swipe, comment, DM, or follow.

Findings (6)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent could automatically like, skip, comment, or swipe from your dating account; mistakes may be hard to undo and could lead to account restrictions or bans.

Why it was flagged

The skill documents automated account actions on dating platforms, including actions that can affect matches and violate platform rules, without describing per-profile approval.

Skill content
Executes the recommended action (swipe, like, comment, skip) ... Auto-swiping violates the Terms of Service of all dating platforms.
Recommendation

Keep auto-swipe disabled unless explicitly needed, require confirmation before each outward-facing action, and prefer using the skill for advice rather than automated account actions.

What this means

Granting these permissions can let the agent observe private app screens and perform clicks or gestures in your account.

Why it was flagged

Screen recording and accessibility access let the agent view screen contents and control logged-in dating apps, which is much broader authority than generating text suggestions.

Skill content
OpenClaw will request: Screen recording permission (for screenshots) - Accessibility permission (for tap/swipe interaction)
Recommendation

Grant screen/accessibility permissions only when actively using auto-swipe, revoke them afterward if possible, and avoid running it in unrelated apps or accounts.

What this means

Private dating conversations, profile images, and screenshots may be sent to external services for analysis.

Why it was flagged

Dating messages and screenshots are sensitive and leave the local device for provider processing; this is disclosed and purpose-aligned, but users should notice the data flow.

Skill content
Conversation data and screenshots are sent to MemePickup's API for processing ... Profile screenshots are processed by OpenAI Vision
Recommendation

Only share screenshots or messages you are comfortable sending to the provider, and review MemePickup's privacy policy before use.

What this means

Your dating preferences may persist across devices and future analyses, including sensitive personal preference information.

Why it was flagged

Dating preferences and dealbreakers become persistent cloud state that can influence future recommendations.

Skill content
Preferences saved to MemePickup cloud (synced across devices)
Recommendation

Review, update, or delete stored preferences when they change, and avoid storing details you do not want retained.

What this means

Installing from the wrong or modified repo could expose your API key or dating data to unreviewed code.

Why it was flagged

The setup supports importing from an external GitHub repo or zip; the included scripts are simple, but users should still verify they are installing the intended source.

Skill content
Import from: github.com/samcraw1/rork-memepickup-app-3 ... Select the memepickup-wingman directory.
Recommendation

Install from a trusted registry or pinned source, and inspect scripts before providing your API key.

What this means

The agent may offer dating advice based on prior context even when you did not directly ask at that moment.

Why it was flagged

The skill intentionally includes proactive coaching behavior based on dating conversation context; no hidden background worker is shown, but autonomous nudges are part of the design.

Skill content
proactively sent timing advice WITHOUT the user asking (no API call)
Recommendation

Use the skill in user-invoked mode or disable autonomous triggers if you do not want proactive dating nudges.