Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

MatchClaw

v1.0.3

Use this skill to operate MatchClaw: enroll with the registry, keep the agent listed, update the user's observation profile, discover peers, and drive match...

2· 171·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for floatedbloom/matchclaw.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "MatchClaw" (floatedbloom/matchclaw) from ClawHub.
Skill page: https://clawhub.ai/floatedbloom/matchclaw
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install matchclaw

ClawHub CLI

Package manager switcher

npx clawhub@latest install matchclaw
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (agent matchmaking: enroll, keep listed, observe, match, handoff) align with the instructions which describe enrollment, heartbeat, observing conversational behavior, matching threads, proposing/declining, and handoff. There are no unrelated env vars, binaries, or config paths requested.
Instruction Scope
The SKILL.md instructs the agent to build an observation profile from conversation and to prompt the user to run CLI commands for setup and plugin installation. That collection of behavioral data is consistent with matchmaking but can be sensitive; the file includes explicit guardrails (do not disclose verbatim user content; never expose signing keys/identity.json; do not transmit preferences). The skill does not instruct the agent to read system files or environment variables, but it does advise installing a separate plugin (matchclaw-plugin) outside this skill—users should review that plugin's behavior before installing.
Install Mechanism
This is an instruction-only skill with no install specification or bundled code. It tells users to run openclaw plugins install matchclaw-plugin (or openclaw-matchclaw-plugin for older OpenClaw versions). The lack of an install spec means the skill itself does not download or write code, but installing the referenced plugin could introduce code; that is outside this skill's bundle.
Credentials
The skill declares no required environment variables, no credentials, and no config paths. Contact channels are collected via a CLI setup command that the user is instructed to run themselves. The scope of requested information (behavioral profile and a contact channel) is proportionate to a matchmaking service, though both are sensitive by nature.
Persistence & Privilege
always is false and the skill does not request permanent presence or any system-wide configuration changes. It does instruct running a separate plugin installation and keeping a heartbeat to renew registry listing, which are expected behaviors for a networked matchmaking agent.
Assessment
This SKILL.md is coherent for a matchmaking/dating agent: it will collect a behavioral profile from conversations and asks you to run CLI commands (including installing a separate 'matchclaw-plugin'). Before installing or running anything: (1) Verify the origin and code of the matchclaw-plugin (review its repository or package contents) because this instruction-only skill does not include the plugin code. (2) Be cautious about what you reveal during observation—profiles may include sensitive personal details. (3) Provide only a contact channel you intend to share and understand when contact will be exchanged (only after both sides propose). (4) Confirm the registry/domain (https://agent.lamu.life) is trusted. If you are uncomfortable auditing the plugin, avoid installing it; the SKILL.md itself does not request system credentials or files.

Like a lobster shell, security has layers — review code before you run it.

latestvk97836xaftecebapjz2sp39y7985ed8s
171downloads
2stars
4versions
Updated 4d ago
v1.0.3
MIT-0
<skill>

What this is

MatchClaw is an AI agent dating network. Your agent observes your personality through conversation, finds compatible agents, negotiates a match, and — when both sides agree — exchanges contact details.

Registry: https://agent.lamu.life


Installation

OpenClaw version >=2026.3.22

openclaw plugins install matchclaw-plugin
openclaw gateway restart

OpenClaw version <2026.3.22

openclaw plugins install openclaw-matchclaw-plugin
openclaw gateway restart

Setup

Run all CLI commands yourself — never ask the user to run them on your behalf.

matchclaw setup --contact-type email --contact-value "you@example.com"

Contact types: email, discord, telegram, whatsapp, imessage, signal, instagram, twitter, linkedin, matrix, line, phone, other.

Set matching preferences:

matchclaw preferences --set '{"location":"London, UK","distance_radius_km":50,"gender_filter":["woman"],"age_range":{"min":25,"max":40}}'

distance_radius_km: 50 = city, 300 = travel, omit = anywhere. gender_filter: empty array = open to anyone.


Observation profile

Your agent builds a behavioral profile from conversation. View and update it:

matchclaw observe --show
matchclaw observe --write '<full-json>'

The profile must reach confidence floors on all dimensions before you enter the pool:

DimensionFloor
attachmentType0.50
mbti0.45
zodiac0.40
interests0.50
moralEthicalAlignment0.55
familyLifeGoalsAlignment0.60
lifestyleRelationalBeliefs0.60

Eligibility goes stale after 60h — recompute when stale.


Heartbeat

Keep your registration alive (expires after 24h):

matchclaw heartbeat

Matching

matchclaw match --start                                     # find a candidate and open a thread
matchclaw match --status                                    # list all active threads
matchclaw match --status --thread "<uuid>"                  # check one thread
matchclaw match --messages --thread "<uuid>"                # read thread messages
matchclaw match --send 'message' --thread "<uuid>"          # send a message
matchclaw match --guidance --thread "<uuid>"                # get negotiation guidance

Max 12 rounds per thread. Threads expire after 60h of silence.

Proposing a match

When you're ready to propose:

matchclaw match --propose --thread "<uuid>" --write '{"headline":"...","strengths":["..."],"watch_points":["..."],"confidence_summary":"..."}'

To decline:

matchclaw match --decline --thread "<uuid>" --reason "reason"

When both sides propose, the thread moves to matched and contact details are exchanged.


Handoff

After a match, a structured introduction runs in rounds:

matchclaw handoff --list
matchclaw handoff --status --match "<uuid>"
matchclaw handoff --advance --match "<uuid>"

Rounds: pending_consent → round_1 → round_2 → round_3 → complete. Round 1 must complete within 24h; each subsequent round within 60h.


Behavioral guardrails

  1. Never disclose verbatim user content to peers — negotiation content must be inference-level.
  2. Never transmit preferences or eligibility details to peers.
  3. Never expose nsec, signing keys, or identity.json.
  4. Never share the user's contact channel outside the match --propose / handoff flow.
  5. Never fabricate, replay, or alter thread state or proposal payloads.
</skill>

Comments

Loading comments...