---
captured_at: 2026-04-23T12:05Z
source: https://clawhub.ai/yarnovo/acong-tech-xiangqin (HTML SSR 渲染内容)
skill_slug: acong-tech-xiangqin
skill_version_at_capture: 0.5.4
captured_by: curl -sS -L "https://clawhub.ai/skills/acong-tech-xiangqin" 提取 Security Scan 面板段落
---

# ClawHub Security Scan — xiangqin v0.5.4（2026-04-23 抓取）

## 总体结果

| 扫描器 | 状态 | 链接 / 置信度 |
|---|---|---|
| VirusTotal | **Benign** | [report](https://www.virustotal.com/gui/file/3125a9ef082cef1cb1be1b201a2555673a5a917bc0cee517c99d7404ed51384c) |
| OpenClaw | **Benign** | high confidence |

## OpenClaw AI 分析（ClawHub 自家 AI-driven skill 安全扫描）

### 总结 summary

> The skill's instructions, install guidance, and runtime actions are consistent with a CLI-based dating (xiangqin) front-end; nothing requested is disproportionate to that purpose, though there are a few user-safety considerations to be aware of (webhook URLs, SMS codes, package origin and auto-update prompts).

### 5 个维度

#### ✓ Purpose & Capability
> The name/description say this is an entry point for a xiangqin platform and the SKILL.md only instructs installing and using a Python CLI (xq) to register, query matches, send messages, and set notification webhooks. Required capabilities (CLI, network access) are what you'd expect for this purpose; there are no unrelated credentials, binaries, or system paths requested.

#### ℹ Instruction Scope
> The SKILL.md instructs the agent to run xq CLI commands (register, verify, profile set, query, dm send, inbox list/reply, report/block) and to prompt the user for SMS verification codes. It also instructs setting agent_gateway_url and agent_hooks_token (user-provided webhook URL/token) for push notifications and to prompt/update the CLI when stderr shows a new version. Those actions are coherent with a notification-capable messaging client, but they introduce natural user-safety considerations: (1) asking users to provide one-time SMS codes is necessary to register but is sensitive; (2) storing/using a user-supplied agent_gateway_url and hooks token can enable outgoing notifications to arbitrary endpoints (so the webhook URL should be controlled/trusted); (3) automatic update prompts may lead to running pip install -U if the agent performs installs — ensure explicit user consent before running upgrades.

#### ℹ Install Mechanism
> This is instruction-only (no install spec embedded). It directs users to install a PyPI package named acong-tech-xiangqin (via uv, pipx, or pip in a venv). Installing from PyPI is a common and expected mechanism for a CLI, but it carries the usual risks of third-party packages: verify the package source (project/repo), prefer isolated venvs/pipx, and review code or repository reputation before installing. The SKILL.md itself does not perform any downloads.

#### ✓ Credentials
> The skill declares no required environment variables or credentials. The document references optional env vars (XIANGQIN_ENDPOINT and XIANGQIN_NO_UPDATE_CHECK) and user-provided profile fields (agent_gateway_url, agent_hooks_token) which are proportional to the described notification features. There are no unexplained requests for unrelated secrets or cloud credentials.

#### ✓ Persistence & Privilege
> always is false and the skill does not request persistent system-wide privileges or modify other skills' configs. It recommends installing a CLI locally (venv/pipx) which is normal. Autonomous invocation is allowed by default but is not combined with excessive privileges or credential access.

### Assessment（给用户的使用建议）

> This skill is coherent with being a CLI-based frontend for a dating platform, but before installing and using it:
> 1. Verify the PyPI package and source repository (acong-tech-xiangqin / linked repo) and prefer installing into an isolated venv or via pipx.
> 2. Be cautious when providing SMS verification codes — only input codes you received for your own number and only when you intend to register.
> 3. Only set agent_gateway_url and agent_hooks_token to endpoints you control or trust, since notifications and possibly message contents can be forwarded there.
> 4. Confirm the default server domain (https://xq.agentaily.com) is acceptable; if using a custom endpoint, set XIANGQIN_ENDPOINT.
> 5. The CLI prints update notices and the SKILL.md suggests running pip install -U on user agreement — do not allow the agent to run upgrade/install commands without explicit consent. If you are unsure about the PyPI package origin or webhook behavior, inspect the package source or use a test account and a controlled webhook endpoint first.

## 面板底部 disclaimer

> Like a lobster shell, security has layers — review code before you run it.

## 历史背景（非 raw，给读者）

- v0.3.0 时曾被标 "suspicious"（对话历史记录，task #48 task description 里有）
- 经 v0.3.1 / v0.4.x / v0.5.x 多次 release，ClawHub 每 version 重扫，最终 0.5.4 已清零
