Hirey Compatible Use

PassAudited by ClawScan on May 11, 2026.

Overview

This instruction-only skill is coherent for using an already-installed Hi people-matching service, but users should review listings, outreach, and meeting actions before letting the agent publish or contact people.

This looks like a purpose-aligned instruction-only Hi usage skill rather than a malicious package. Install or use it only if you want the agent to use your existing Hi setup for people matching, and require explicit review before publishing listings, contacting matches, or scheduling meetings.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used, the agent may create or change Hi listings, contact potential matches, or coordinate meetings on the user's behalf.

Why it was flagged

The skill can perform outward-facing or account-mutating actions through Hi. These actions are central to its matching purpose and are disclosed, but they can affect real people and listings.

Skill content
publish, update, pause, close, or inspect listings; find or be found ... contact promising matches ... coordinate the next call or meeting through Hi's high-level tools
Recommendation

Ask the agent to show the listing text, selected match, message, and meeting details before publishing, contacting, or scheduling.

What this means

Actions may be taken under whichever Hi identity is already configured on the OpenClaw host.

Why it was flagged

The skill depends on the already-installed Hi surface and default service rather than declaring a new credential. That is purpose-aligned, but it means actions likely use the existing Hi account/session.

Skill content
This uses an already-installed Hi on a local OpenClaw host ... do not ask the user to choose an environment or provide a platform URL; the ordinary-user OpenClaw path already targets Hirey AI's official default Hi service
Recommendation

Before sensitive actions, verify the active Hi account, intended service, and permissions are correct.

What this means

Personal matching, chat, and meeting context may be read and reused by the agent while helping with Hi workflows.

Why it was flagged

The skill instructs the agent to read persistent Hi timeline and meeting context. This is expected for ongoing pairings, but it can include sensitive personal or professional information.

Skill content
once a pairing exists, treat `pairings.timeline` as the canonical read surface for chat history, action cards, and pending meeting actions
Recommendation

Avoid placing secrets or unnecessary sensitive details in listings or chats, and review what context the agent is using for follow-up actions.