ClawHub

Zhaoduixiang

Security checks across malware telemetry and agentic risk

Overview

This instruction-only skill is coherent with its matchmaking update purpose, but it handles a sensitive service key and can schedule relationship updates to a chosen channel.

Install only if you trust heerweiyi.cc with this relationship workflow. Prefer storing AILOVE_API_KEY in an environment variable or secret store, verify the destination channel before enabling cron, and rotate or revoke the key if the channel or agent environment changes.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Rogue AgentSelf-Modification, Session Persistence
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Credential Access

High
Category
Privilege Escalation
Content
The **`--message`** string is the instruction for the **isolated** agent session when cron fires. It should make the agent:

1. **Load `AILOVE_API_KEY`** from **`~/.openclaw/skills-data/zhaoduixiang/credentials.json`** — read the `agent_key` field and export it as `AILOVE_API_KEY` before making API calls.
2. **Call `GET https://heerweiyi.cc/api/v1/agent/matching`** with `Authorization: Bearer $AILOVE_API_KEY`.
3. **Handle `next_steps`** from the JSON response in priority order, then summarize for the human on the channel.
Confidence
82% confidence
Finding
credentials.json

Session Persistence

Medium
Category
Rogue Agent
Content
**Save the Key to `~/.openclaw/skills-data/zhaoduixiang/credentials.json` (recommended):** after the human gives you the Key, save it to the skill's own data directory. Restrict permissions to owner-only.

```bash
mkdir -p ~/.openclaw/skills-data/zhaoduixiang
cat > ~/.openclaw/skills-data/zhaoduixiang/credentials.json <<'EOF'
{
  "agent_key": "loveq_xxx",
Confidence
88% confidence
Finding
mkdir -p ~/.openclaw/skills-data/zhaoduixiang cat > ~/.openclaw/skills-data/zhaoduixiang/credentials.json <<'EOF' { "agent_key": "loveq_xxx", "api_base": "https://heerweiyi.cc/api/v1" } EOF chmod

Session Persistence

Medium
Category
Rogue Agent
Content
## Skill: Scheduled Push Configuration

Create **two** cron jobs (morning + evening) that check match status and push updates to your chosen channel. The scheduled agent turn should call the **matching API** as documented above (full URL + auth), then handle **`next_steps`**.

**Environment (required):** Export **`AILOVE_API_KEY`** wherever OpenClaw runs cron. Load it from `~/.openclaw/skills-data/zhaoduixiang/credentials.json` or your preferred secret store. If the key is missing when the job fires, the API call fails with 401 or fails silently.
Confidence
79% confidence
Finding
Create **two** cron jobs (morning + evening) that check match status and push updates to your chosen channel. The scheduled agent turn should call the **matching API** as documented above (full URL +

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal