← Back to Skills Marketplace
104
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install matchmaker-canary
Description
交友平台 CLI（生产 https://matchmaker.agentaily.com）。装了之后可以和你的 Claude 对话式注册、填资料（性别、年龄、城市、兴趣、自我介绍），然后让你的 agent 直接用受限只读 SQL 查其他人匹配 + 发消息 + 收消息 + 读回执。中心化 Postgres，手机号...
Usage Guidance
This skill appears to do what it says (a CLI-backed matchmaking interface), but before installing or enabling it you should: 1) Verify the origin and code of the 'mm' CLI package (@acong-tech/matchmaker) before running npm install — npm installs can run arbitrary code. 2) Confirm you are comfortable with storing a session_token in your vault under a 'matchmaker-user' platform (the manifest did not declare this requirement). 3) Avoid putting sensitive PII (ID numbers, precise addresses) into profiles. 4) Be aware the agent can send messages on your behalf — if you do not want automated outbound actions, disable autonomous invocation for this skill or require explicit confirmation. 5) If possible, obtain the matchmaker backend's privacy/security documentation or inspect the mm CLI source to confirm it respects the no-logging guarantees described in SKILL.md.
Capability Analysis
Type: OpenClaw Skill
Name: matchmaker-canary
Version: 0.1.0-canary.2
The matchmaker skill provides a CLI interface for a dating platform, allowing agents to manage user profiles and perform searches via a centralized API (matchmaker.agentaily.com). It includes privacy-focused features such as phone number masking and restricted SQL-like queries to prevent data scraping. The skill's operations, including session management in the vault and message handling, are well-documented and align with its stated social networking purpose without evidence of malicious intent.
Capability Assessment
Purpose & Capability
The name/description describe a CLI-backed matchmaking skill and the runtime instructions align with that purpose (register, verify, profile, query, send, inbox). However the skill metadata lists no required config paths or credentials while the SKILL.md repeatedly references a vault platform ('matchmaker-user') for storing session_token and expects the 'mm' CLI to be present/installed. Omitting the vault requirement from declared metadata is an incoherence.
Instruction Scope
Instructions tell the agent to perform phone-based registration/verification, store session_token in a 'matchmaker-user' vault entry, run mm CLI commands, and send/mark messages. This is within the stated scope, but the skill explicitly instructs the agent to write persistent credentials (session_token) to a vault and to install/run a third-party CLI — actions that go beyond simple read-only queries and are not declared in the manifest. The agent is also given the ability to send messages (mm send), so it can take outbound actions on behalf of the user.
Install Mechanism
The skill is instruction-only (no install spec). SKILL.md recommends installing the mm CLI via `npm install -g @acong-tech/matchmaker@latest`. That implies pulling and executing third-party npm package code if a user follows the doc — a moderate risk because npm packages can run arbitrary code during install. The registry metadata does not provide a vetted install source or checksum.
Credentials
No env vars or config paths are declared in the registry metadata, yet SKILL.md requires Node.js and expects vault access (writing session_token under 'matchmaker-user'). Storing a session token in vault is reasonable for a CLI session, but the absence of declared config requirements is an inconsistency. The skill handles phone numbers and verification codes (sensitive PII); the doc claims phone numbers won't be logged, but this is a behavioral guarantee rather than an enforced manifest-level permission.
Persistence & Privilege
The skill does not request 'always: true' and has no install-time persistence described by the registry. Its main persistence is writing a session_token into a vault platform (user-side). Autonomous invocation (disable-model-invocation=false) is the platform default; combined with message-sending capability this means an agent could act (send messages) autonomously — not a manifest misconfiguration but a user risk to consider.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install matchmaker-canary - After installation, invoke the skill by name or use
/matchmaker-canary - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0-canary.2
validate v1.2 fixes (multiline desc + record path)
v0.1.0-canary.1
initial canary for self-testing
Metadata
Frequently Asked Questions
What is matchmaker — 共享交友资料库 + agent 查询 + 异步消息?
交友平台 CLI（生产 https://matchmaker.agentaily.com）。装了之后可以和你的 Claude 对话式注册、填资料（性别、年龄、城市、兴趣、自我介绍），然后让你的 agent 直接用受限只读 SQL 查其他人匹配 + 发消息 + 收消息 + 读回执。中心化 Postgres，手机号... It is an AI Agent Skill for Claude Code / OpenClaw, with 104 downloads so far.
How do I install matchmaker — 共享交友资料库 + agent 查询 + 异步消息?
Run "/install matchmaker-canary" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is matchmaker — 共享交友资料库 + agent 查询 + 异步消息 free?
Yes, matchmaker — 共享交友资料库 + agent 查询 + 异步消息 is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does matchmaker — 共享交友资料库 + agent 查询 + 异步消息 support?
matchmaker — 共享交友资料库 + agent 查询 + 异步消息 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created matchmaker — 共享交友资料库 + agent 查询 + 异步消息?
It is built and maintained by yarnb (@yarnovo); the current version is v0.1.0-canary.2.
More Skills