v1.0.1

玄空数术·六爻占卜

ReviewClawScan verdict for this skill. Analyzed May 1, 2026, 8:25 AM.

Analysis

The skill’s divination purpose is coherent, but it asks the agent to run shell commands with user-supplied text and to fetch/send remote images without clear validation, which deserves review before installation.

GuidanceReview this skill before installing. If you use it, provide only a dedicated API key for this service, avoid sensitive personal details, and prefer an updated version that safely passes user text to Python without shell interpolation and validates downloaded image URLs before sending them.

Findings (5)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Tool Misuse and Exploitation

SeverityHighConfidenceMediumStatusConcern

SKILL.md

python -X utf8 liuyao_service.py divine -n <数字1,数字2,数字3> -c <占卜类别> -m "<用户问题>"

The workflow inserts free-form user text into a bash command argument, and similar instructions are used for chat questions and API-key saving, without explicit escaping or safe argument-array guidance.

User impactA crafted question could cause the agent to run unintended shell syntax or commands in the local environment if the instruction is followed literally.

RecommendationDo not interpolate raw user text into shell commands; call the Python code through a safe argument array or JSON/stdin, validate numbers and categories, and escape or reject shell metacharacters.

Tool Misuse and Exploitation

SeverityMediumConfidenceMediumStatusConcern

SKILL.md

curl -o /tmp/liuyao_images/guaxiang_$(date +%Y%m%d%H%M%S).png "<image_url>"

The image URL comes from the external API response and is downloaded automatically before being sent with openclaw, but the artifact does not specify scheme, host, content-type, or size checks.

User impactIf the provider response is wrong or compromised, the agent could be made to fetch unexpected URLs or forward an unintended local file as media.

RecommendationOnly fetch HTTPS image URLs from an allowlisted host, reject file/internal/private-network URLs, verify image content and size, and avoid forwarding downloaded files until validation succeeds.

Agentic Supply Chain Vulnerabilities

SeverityLowConfidenceHighStatusNote

install spec

No install spec — this is an instruction-only skill.

The skill still relies on commands and dependencies such as Python, httpx, curl, and openclaw, but the install/provenance contract does not declare how those are provided.

User impactThe skill may fail or rely on undeclared local tooling, making it harder to verify what will actually run.

RecommendationAdd a clear install spec or requirements file, declare required commands/dependencies, and ensure the documented CLI behavior matches the provided source.

Permission boundary

Checks whether tool use, credentials, dependencies, identity, account access, or inter-agent boundaries are broader than the stated purpose.

Identity and Privilege Abuse

SeverityLowConfidenceHighStatusNote

SKILL.md

保存到 `~/.liuyao_key` 文件：
   ```bash
   echo "lyk-xxxxx..." > ~/.liuyao_key
   ```

The skill persistently stores a user-provided API key in the home directory for later service calls.

User impactThe service key remains on the machine and can be reused by this skill until deleted or rotated.

RecommendationUse only a key intended for this divination service, store it with restrictive permissions, and provide clear deletion/rotation instructions.

Sensitive data protection

Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.

Insecure Inter-Agent Communication

SeverityLowConfidenceHighStatusNote

liuyao_service.py

BASE_URL = "https://yao.gizzap.com"

The Python client sends divination/chat requests and the API key header to this external service endpoint.

User impactQuestions about relationships, health, finances, travel, or other personal topics may leave the local agent and be processed by the external provider.

RecommendationAvoid sharing highly sensitive personal details unless you trust the provider and understand its privacy practices.