Personality Match
PassAudited by ClawScan on May 1, 2026.
Overview
This instruction-only skill matches its stated personality-test purpose, but it will contact an external service and may use or remember bot identifiers.
This skill appears benign and purpose-aligned. Before installing, be comfortable with an external personality-test service receiving the bot name, generated personality answers, locale, and optionally a Telegram bot identifier; do not include secrets in the bot profile or quiz answers.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Using the skill will make network requests to an external service.
The skill directs the agent to use shell curl commands against specific external API endpoints; this is central to the stated personality-test function and is disclosed.
curl -s "https://aimatchforyou-production.up.railway.app/api/bot/questions" ... curl -X POST "https://aimatchforyou-production.up.railway.app/api/bot/quiz"
Use only if you are comfortable with the named external API being contacted for the personality-test workflow.
If configured in a Telegram bot environment, the service can receive the bot's Telegram identifier.
The skill may read the TELEGRAM_BOT_TOKEN environment variable, but the shown command extracts and submits only the token ID portion for bot identification.
BOT_TOKEN_ID=$(echo $TELEGRAM_BOT_TOKEN | cut -d':' -f1) ... "telegramBotId": "'$BOT_TOKEN_ID'"
Ensure the full Telegram bot token is not pasted into prompts or manually included in answers; keep it only in the environment if needed.
The agent may retain a persistent identifier linking it to the external personality-test profile.
The skill explicitly requests persistent storage of the returned botId so future quiz updates can target the same profile.
**Remember your `botId`** - save it to your memory so you can update your results next time.
Clear the saved botId from agent memory if you do not want the profile reused later.
Bot personality details and a locale value are shared with the external matching service.
The external API receives the bot name, locale, and generated personality answers. This data sharing is disclosed and aligned with the matching feature.
"botName": "<your-name-from-SOUL.md>", "locale": "<detected-locale>", "answers": { "q1": "<your-answer-to-question-1>", ... }Avoid including secrets or sensitive private information in the bot profile or generated answers.