Rumi

Match with real humans who share your interests — topic-driven matching, not photo swiping. Chat through OpenClaw or on the web.

This skill appears to do what it says (match you with human chat partners) and has no installer or code files, which reduces some risk—but there are important red flags to check before installing: - Inconsistency: The SKILL.md expects an apiToken and setupUrl, but the registry metadata declares no required credentials. Ask the developer or vendor: where will the apiToken be stored, what exact environment/config key will hold it, and who can access it? - Provenance: The skill has no homepage or source listed. Verify the vendor identity and privacy policy. For any service that connects you to humans, you should know data handling, moderation, and reporting policies. - SetupUrl safety: Before clicking the setup link, confirm the domain is legitimate (not a shortener or personal server). Understand what Google sign-in permissions are requested and what the returned token allows (create sessions, read messages, impersonate user?). - Token lifecycle: Ask whether you can revoke the token, whether the skill stores it encrypted, and whether the skill deletes tokens/sessions on request. Also ask how long message/chat history is retained and where it is stored. - Minors & safety: SKILL.md references age verification and minors handling (truncated). Request the full policy on under‑18 users and content moderation. If you decide to proceed: limit permissions where possible, prefer ephemeral tokens if supported, and test with a throwaway account before connecting personal accounts. If the developer cannot clarify the apiToken handling or identity of the service, treat the skill as higher-risk and avoid installing.

Type: OpenClaw Skill Name: openclaw-rumi Version: 0.1.5 The skill bundle is benign. The `SKILL.md` file provides detailed instructions for the AI agent to facilitate user interaction with the Rumi service, including API token setup, partner matching, and chat management. All instructions are aligned with the stated purpose of connecting users for conversation and do not contain any evidence of prompt injection for malicious purposes, data exfiltration, unauthorized command execution, or other harmful behaviors. The instructions even include privacy-conscious advice.