xiangqin

• Verdict: Advisory
• Analyzed: Apr 23, 2026, 10:31 PM
• Findings: 0
• Version: 0.7.1
• Hash: 3978f3ee3f4d3a2364bea4949ed64e429394084b18e97f8cb5769c81ec5e21e1
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: acong-tech-xiangqin Version: 0.7.1 The skill acts as a wrapper for the 'xiangqin' matchmaking platform, utilizing a Python-based CLI tool (acong-tech-xiangqin). It includes well-documented security practices such as HMAC-SHA256 hashing for sensitive data (phone/ID numbers), restricted DSL for database queries to prevent injection, and explicit user consent requirements for software updates. While it handles PII and executes shell commands, these actions are transparently aligned with its stated purpose, and no evidence of malicious intent, data exfiltration to unauthorized endpoints, or obfuscation was found in SKILL.md or README.md.