Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Interpret Fate Via Ziwei

通过紫薇斗数解释命运 A skill to interpret fate using Ziwei astrology principles.

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 29 · 0 current installs · 0 all-time installs
byHerbert He@HerbertHe
MIT-0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description (Ziwei astrology) aligns with the included docs and runtime instructions that compute a chart from birth date/time/place. However, the SKILL.md examples import and use the npm package "iztro" while the skill declares no install steps or required packages — it's unclear how the agent is expected to obtain that dependency. Requesting Node.js 18+ is reasonable for this purpose.
Instruction Scope
Instructions ask the agent to collect only the user's birth date/time/place, gender, leap-month and 12/24-hour clarifications, and to compute/print astrolabe and horoscope data. This stays within the stated purpose. The SKILL.md also points at an external URL (https://ziwei.pub/astrolabe/?) for online charts — that endpoint is related to astrology and not obviously exfiltratory, but it is external. The instructions do not request unrelated system files or credentials.
!
Install Mechanism
There is no install specification (instruction-only), which is low-risk normally, but the SKILL.md demonstrates code that imports an external npm package ('iztro') and requires Node.js 18+. The skill does not document how to install 'iztro' (npm install, or a pinned version, or a source repository). That omission makes the runtime environment ambiguous and means the agent or user would likely need to fetch and install code at runtime — something you should verify and control (source, version, integrity).
Credentials
The skill requests no environment variables, no credentials, and no config paths. Its data needs (birth date/time/place and gender) are proportional to its stated function.
Persistence & Privilege
Flags indicate normal invocation (always:false, agent-autonomy allowed). The skill does not request persistent privileges, nor does it instruct modifying other skills or system settings. Autonomous invocation is allowed by default and not itself flagged here.
What to consider before installing
This skill appears to be a straightforward Ziwei astrology helper, but before installing or running it you should: 1) Confirm how the 'iztro' dependency is obtained — prefer installing from a known source (npmjs.org) or inspecting the package repository (e.g., the linked GitHub project) and a specific version/hash. 2) Avoid running opaque install scripts: if you must install 'iztro', review its source for any network calls, telemetry, or file-system access; prefer installing in an isolated environment or container. 3) Verify the external URL (https://ziwei.pub) if you plan to open or submit data there; avoid sending personal data to unknown endpoints. 4) Ensure Node.js is installed in a controlled environment (Node 18+ as required). 5) If you want to let an agent invoke this skill autonomously, be aware it could run the Node commands shown — make sure you trust the iztro package code and that no hidden install/download steps are required. If the author or a pinned package version cannot be verified, treat the lack of an explicit install/provenance as a red flag and consider running the computations manually in a sandbox first.

Like a lobster shell, security has layers — review code before you run it.

Current versionv0.1.1
Download zip
latestvk975v643h17cmb0gbjq78x6xth836rpb

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

紫薇斗数

技能描述

本技能通过紫薇斗数的原理来解释命运,提供关于个人命运的见解和建议。用户输入出生日期、时间和地点,系统将根据这些信息进行计算,并输出命运解释、关键人生事件以及相关建议。

环境检查

  • 需要安装 Node.js 版本 18 或更高,如果没有 node 环境需要先进行安装。

执行下面的命令进行检查:

node -v

用户输入

  • 出生日期(需要包含年月日时)
  • 性别(男/女)

输入检查

如果输入不完整或格式错误,系统将提示用户提供正确的信息。

注意事项如下:

  • 需要与用户确认出生日期为12小时制,还是24小时制
  • 需要与用户确认是否闰月

计算出生时辰

根据用户提供的出生时间,系统将计算出对应的时辰。中国传统的时辰划分如下:

时间序号时辰名称时间范围
0子时23:00 - 00:59
1丑时01:00 - 02:59
2寅时03:00 - 04:59
3卯时05:00 - 06:59
4辰时07:00 - 08:59
5巳时09:00 - 10:59
6午时11:00 - 12:59
7未时13:00 - 14:59
8申时15:00 - 16:59
9酉时17:00 - 18:59
10戌时19:00 - 20:59
11亥时21:00 - 22:59

为用户输出对应的时辰名称和时间范围。

阅读文献资料

阅读对应的文献资料

  • 星盘介绍 (docs/learn-astrolabe.md)
  • 宫位知识 (docs/learn-palace.md)
  • 星曜知识 (docs/learn-star.md)
  • 四化 (docs/learn-mutagen.md)
  • 格局 (docs/learn-pattern.md)
  • 安星决 (docs/learn-setup.md)
  • 紫薇斗数全书 (docs/learn-ancient-book.md)
  • 诸星问答论 (docs/learn-ancient-book-qa.md)

输出在线排盘地址

https://ziwei.pub/astrolabe/?d=<出生日期,格式为 YYYY-M-D>&t=<时辰序号>&leap=<是否闰月,true 或 false>&g=<性别,male或female>&type=<日历类型,solar 或 lunar>

获取星盘数据和运限数据

  1. 如果用户提供的出生日期为公历(阳历),则使用 node 执行下面的脚本来排星盘。
import { astro } from "iztro"
const timeIndex = 0 // 根据用户提供的出生时间计算出的时辰序号
const isLeapMonth = false // 根据用户提供的信息确定是否为闰月
const astrolabe = astro.bySolar(
  "<出生日期,格式为 YYYY-M-D>",
  timeIndex,
  "<性别,男或女>",
  isLeapMonth,
)

// 获取星盘数据
console.log(astrolabe)

// 获取运限数据
astrolabe.horoscope(new Date())
  1. 如果用户提供的出生日期为农历(阴历),则使用 node 执行下面的脚本来排星盘。
import { astro } from "iztro"
const timeIndex = 0 // 根据用户提供的出生时间计算出的时辰序号
const isLeapMonth = false // 根据用户提供的信息确定是否为闰月
const astrolabe = astro.byLunar(
  "<出生日期,格式为 YYYY-M-D>",
  timeIndex,
  "<性别,男或女>",
  isLeapMonth,
)

// 获取星盘数据
console.log(astrolabe)

// 获取运限数据
astrolabe.horoscope(new Date())

数据字段解释

星盘数据字段说明

字段名字段含义
solarDate阳历日期
lunarDate农历日期
chineseDate四柱
time时辰
timeRange时辰对应的时间段
sign星座
zodiac生肖
earthlyBranchOfSoulPalace命宫地支
earthlyBranchOfBodyPalace身宫地支
soul命主
body身主
fiveElementsClass五行局
palaces十二宫数据(数组,见下表)

十二宫数据(palaces)字段说明

字段名字段含义
name宫名
isBodyPalace是否身宫
isOriginalPalace是否来因宫
heavenlyStem宫位天干
earthlyBranch宫位地支
majorStars主星(含天马禄存,数组)
minorStars辅星(含六吉六煞,数组)
adjectiveStars杂耀(数组)
changsheng12长生12神
boshi12博士12神
jiangqian12流年将前12神
suiqian12流年岁前12神
stage大限(对象,含range和heavenlyStem)
ages小限(数组)
majorStars / minorStars / adjectiveStars 结构
字段名字段含义
name星名
type星类型
scope星所属范围
brightness星曜状态(如庙、得等,仅majorStars有)

运限数据字段说明

字段名字段含义
solarDate阳历日期
lunarDate农历日期
decadal大限(十年运)相关数据对象
decadal.index大限序号
decadal.heavenlyStem大限天干
decadal.earthlyBranch大限地支
decadal.palaceNames大限对应的十二宫名称数组
decadal.mutagen大限变星(主变星数组)
decadal.stars大限相关星曜数组
decadal.age大限年龄对象
decadal.age.index大限年龄序号
decadal.age.nominalAge大限虚岁年龄
yearly流年(年度运)相关数据对象
yearly.index流年序号
yearly.heavenlyStem流年天干
yearly.earthlyBranch流年地支
yearly.palaceNames流年对应的十二宫名称数组
yearly.mutagen流年变星(主变星数组)
yearly.stars流年相关星曜二维数组(每宫一个数组)
monthly流月(月度运)相关数据对象
monthly.index流月序号
monthly.heavenlyStem流月天干
monthly.earthlyBranch流月地支
monthly.palaceNames流月对应的十二宫名称数组
monthly.mutagen流月变星(主变星数组)
daily流日(每日运)相关数据对象
daily.index流日序号
daily.heavenlyStem流日天干
daily.earthlyBranch流日地支
daily.palaceNames流日对应的十二宫名称数组
daily.mutagen流日变星(主变星数组)
hourly流时(时辰运)相关数据对象
hourly.index流时序号
hourly.heavenlyStem流时天干
hourly.earthlyBranch流时地支
hourly.palaceNames流时对应的十二宫名称数组
hourly.mutagen流时变星(主变星数组)

输出星盘数据和运限数据

得到的数据,按照字段的具体含义,为用户输出详细的星盘数据和运限数据。

输出解盘结论

根据星盘数据和运限数据,结合参考资料,为用户提供详细的关于个人命运的见解和建议。

Files

9 total
Select a file
Select a file to preview.

Comments

Loading comments…