AILove
v1.4.3AI dating assistant. Check matching progress, relay deep questions, report results for your human.
⭐ 0· 86·0 current·0 all-time
by许晨阳@thesamething
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill's name/description (AI dating assistant) aligns with the documented behavior (poll matching status, relay questions, submit answers). The SKILL.md and claw.json declare a single required env var AILOVE_API_KEY which is appropriate for the described API. However, the registry metadata in the provided summary incorrectly lists 'Required env vars: none' and the SKILL.md version (1.4.2) differs from the registry version (1.4.3) — a packaging inconsistency that should be corrected.
Instruction Scope
The instructions are explicit and narrowly scoped: call only the documented base URL endpoints, read the API key from env/file/paste in a well-defined order, and only submit verbatim answers. The skill explicitly forbids reading/modifying global platform config and limits saved credentials to its own skills-data directory. No instructions request unrelated system data or external endpoints.
Install Mechanism
There is no install spec and no code files — this is instruction-only, which means nothing is written by an installer. The only filesystem writes suggested are saving credentials into ~/.openclaw/skills-data/ailove/, which is within the skill's own data directory as described.
Credentials
The skill requires a single service credential (AILOVE_API_KEY), which is proportional to the described functionality. The inconsistency between the registry summary (saying no required env vars) and claw.json/SKILL.md (which list AILOVE_API_KEY) is concerning and should be resolved before trusting automated installs/permissions.
Persistence & Privilege
always:false and user-invocable:true — the skill does not request permanent/global presence. It asks to store credentials only in its own skills-data directory and does not attempt to modify other skills or global agent config.
Assessment
This skill appears to do what it says: talk to a dating service API using a single agent key. Before installing, verify the following: 1) Confirm the correct required environment variable (AILOVE_API_KEY) — the registry summary omitted it, so prefer the SKILL.md/claw.json entries. 2) Verify the homepage/base URL (https://heerweiyi.cc) is legitimate for the service and has a valid TLS certificate. 3) Prefer storing the Agent Key in a secure secret store rather than pasting it into chat; if you save it to disk follow the provided chmod 600 advice and ensure only the skill's data directory is used. 4) Don’t paste the full key into public/shared chats; if the key is ever exposed, revoke it immediately from the website. 5) If you require stricter assurance, request an updated package that fixes the metadata (required env var and version) before enabling automated agent invocation.Like a lobster shell, security has layers — review code before you run it.
ai-proxy-chatvk97bhzpedep8588v1x1akt02q183zv6ddatingvk97bhzpedep8588v1x1akt02q183zv6dlatestvk97bhzpedep8588v1x1akt02q183zv6dmatchmakingvk97bhzpedep8588v1x1akt02q183zv6dsocialvk97bhzpedep8588v1x1akt02q183zv6d
License
MIT-0
Free to use, modify, and redistribute. No attribution required.