crush
Creates a personalized AI model of a crush using chat logs and photos, enabling simulated conversations and emotional analysis.
Install this skill
Security score
The crush skill was audited on May 26, 2026 and we found 17 security issues across 2 threat categories, including 12 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 25 | - `${CLAUDE_SKILL_DIR}` resolves to the skill directory automatically. |
Template literal with variable interpolation in command context
| 31 | - Use `{baseDir}` in place of `${CLAUDE_SKILL_DIR}` — OpenClaw resolves this at runtime. |
Template literal with variable interpolation in command context
| 70 | | Parse WeChat exports | `Bash` → `python3 ${CLAUDE_SKILL_DIR}/tools/wechat_parser.py` | |
Template literal with variable interpolation in command context
| 71 | | Parse QQ exports | `Bash` → `python3 ${CLAUDE_SKILL_DIR}/tools/qq_parser.py` | |
Template literal with variable interpolation in command context
| 72 | | Parse social media text | `Bash` → `python3 ${CLAUDE_SKILL_DIR}/tools/social_parser.py` | |
Template literal with variable interpolation in command context
| 73 | | Analyze photo EXIF / GPS | `Bash` → `python3 ${CLAUDE_SKILL_DIR}/tools/photo_analyzer.py` | |
Template literal with variable interpolation in command context
| 74 | | Bayesian message tagging | `Bash` → `python3 ${CLAUDE_SKILL_DIR}/tools/bayesian_tagger.py` | |
Template literal with variable interpolation in command context
| 75 | | Version snapshots | `Bash` → `python3 ${CLAUDE_SKILL_DIR}/tools/version_manager.py` | |
Template literal with variable interpolation in command context
| 77 | | List existing profiles | `Bash` → `python3 ${CLAUDE_SKILL_DIR}/tools/skill_writer.py --action list` | |
Template literal with variable interpolation in command context
| 79 | **OpenClaw note**: Replace `${CLAUDE_SKILL_DIR}` with `{baseDir}` in all Bash commands. |
Template literal with variable interpolation in command context
| 99 | Follow `${CLAUDE_SKILL_DIR}/prompts/intake.md`. Ask three questions: |
Template literal with variable interpolation in command context
| 142 | ```bash |
Template literal with variable interpolation in command context
| 167 | 1. Follow `${CLAUDE_SKILL_DIR}/prompts/correction_handler.md`. |
Template literal with variable interpolation in command context
| 177 | ```bash |
Template literal with variable interpolation in command context
| 184 | ```bash |
Template literal with variable interpolation in command context
| 189 | ```bash |
Access to hidden dotfiles in home directory
| 29 | - Install to `~/.openclaw/skills/crush` or `<workspace>/skills/crush`. |