Skill Trust Decision
dating
The Dating skill is a legitimate dating preparation tool with documented browser automation and external MCP service dependency, but raises ethical concerns about systematic profiling of individuals without their consent.
Why this conclusion was reached
0/4 dimensions flagged Pass
Declared vs actual capability
Declared resources and inferred behavior are broadly aligned.
Review
Hidden execution and egress
22 lower-risk artifacts were extracted and still need context.
Pass
Attack chain and severe findings
There is no explicit malicious chain in the report.
Pass
Dependencies and supply chain hygiene
Dependencies are present but no obvious high-risk issue stands out.
What drove the risk score up
External MCP endpoint communication +10
ManoBrowser MCP connects to datasaver.deepminingai.com for browser automation - documented but involves external data flow
Remote dependency download +8
git clone https://github.com/ClawCap/ManoBrowser - downloads code from external repo at runtime
Deep behavioral profiling +7
Systematic collection and analysis of target person's interests, personality, and social patterns without their knowledge
Most important evidence
Medium Sensitive Access
External MCP service dependency
The skill depends on ManoBrowser MCP plugin which communicates with datasaver.deepminingai.com external endpoint for browser automation. This means browsing data flows to an external service.
scripts/check_manobrowser.sh:26 Verify the privacy policy of deepminingai.com and ensure user consent for external browser data processing
Medium Sensitive Access
Runtime dependency download from external repo
SKILL.md instructs auto-download of ManoBrowser via git clone from github.com/ClawCap at runtime. While documented, this retrieves executable code from external source.
SKILL.md:98 Consider pinning to a specific commit hash or including dependency in the skill package
Low Doc Mismatch
Data collection scope ambiguity
The main SKILL.md specifies collecting target person's public data, but sub-modules (xiaohongshu/douyin/weibo/douban/bilibili) are documented as collecting the logged-in user's data. Dating skill selectively uses only 'public' parts but the sub-module descriptions claim full collection.
xiaohongshu-deep-profile-collect/SKILL.md etc.:1 Clarify in sub-module SKILL.mds that they are designed for the Dating context with limited scope
Declared capability vs actual capability
Browser Pass
Declared ADMIN
→ Inferred ADMIN
SKILL.md:depends: manobrowser; All sub-modules use chrome_navigate/chrome_execute_script Network Pass
Declared READ
→ Inferred READ
SKILL.md:98 git clone; scripts/check_manobrowser.sh:26 external API endpoint Filesystem Pass
Declared WRITE
→ Inferred WRITE
SKILL.md:98 git clone to ./manobrowser; clawcap-data/ directory writes Shell Pass
Declared NONE
→ Inferred WRITE
scripts/check_manobrowser.sh uses curl for MCP connection testing Suspicious artifacts and egress
Medium External URL
https://img.shields.io/badge/License-MIT-blue.svg README.md:25
Medium External URL
https://opensource.org/licenses/MIT README.md:25
Medium External URL
https://img.shields.io/github/stars/ClawCap/Dating.svg README.md:26
Medium External URL
https://www.bilibili.com bilibili-deep-profile-collect/SKILL.md:49
Medium External URL
https://api.bilibili.com/x/web-interface/nav bilibili-deep-profile-collect/SKILL.md:65
Medium External URL
https://space.bilibili.com/ bilibili-deep-profile-collect/SKILL.md:95
Medium External URL
https://api.bilibili.com/x/v3/fav/folder/created/list-all?up_mid= bilibili-deep-profile-collect/SKILL.md:148
Medium External URL
https://api.bilibili.com/x/v3/fav/resource/list?media_id= bilibili-deep-profile-collect/SKILL.md:186
Medium External URL
https://www.douban.com/mine/ douban-deep-profile-collect/SKILL.md:47
Medium External URL
https://movie.douban.com/people/ douban-deep-profile-collect/SKILL.md:90
Medium External URL
https://book.douban.com/people/ douban-deep-profile-collect/SKILL.md:223
Medium External URL
https://www.douban.com/people/ douban-deep-profile-collect/SKILL.md:357
Dependencies and supply chain
| Package | Version | Source | Known vuln | Notes |
|---|---|---|---|---|
| manobrowser | latest | github.com/ClawCap/ManoBrowser | No | Auto-downloaded at runtime via git clone; MCP connects to datasaver.deepminingai.com |
File composition
11 files · 2776 lines
Markdown 9 files · 2717 linesShell 1 files · 54 linesJSON 1 files · 5 lines
Files of concern · 9
douban-deep-profile-collect/SKILL.md https://www.douban.com/mine/ · https://movie.douban.com/people/ · https://book.douban.com/people/ · https://www.douban.com/people/
xiaohongshu-deep-profile-collect/SKILL.md https://www.xiaohongshu.com/ · https://www.xiaohongshu.com
SKILL.md Runtime dependency download from external repo
douyin-deep-profile-collect/SKILL.md https://www.douyin.com/user/self
bilibili-deep-profile-collect/SKILL.md https://www.bilibili.com · https://api.bilibili.com/x/web-interface/nav · https://space.bilibili.com/ · https://api.bilibili.com/x/v3/fav/folder/created/list-all?up_mid= · https://api.bilibili.com/x/v3/fav/resource/list?media_id=
weibo-deep-profile-collect/SKILL.md https://weibo.com/ · https://weibo.com/u/ · https://weibo.com/u/page/follow/ · https://weibo.com/u/page/fav/
README.md https://img.shields.io/badge/License-MIT-blue.svg · https://opensource.org/licenses/MIT · https://img.shields.io/github/stars/ClawCap/Dating.svg
skill-card.md https://clawhub.ai/user/sophie-xin9 · https://clawhub.ai/sophie-xin9/dating-prep
scripts/check_manobrowser.sh External MCP service dependency · https://datasaver.deepminingai.com/api/v2/
Other files · xiaokai_date_report.md · _meta.json
Security positives
All behaviors are documented in SKILL.md - no hidden functionality
No credential harvesting or API key exfiltration detected
No base64/encoded obfuscation or anti-analysis patterns
No sensitive path access (~/.ssh, ~/.aws, .env)
No reverse shell, C2, or data theft behavior
Public data only collection policy is stated and followed
Data stored locally in clawcap-data/ directory, not uploaded externally
Ethics disclaimer present in generated reports