Ziwei Verify
PassAudited by VirusTotal on May 10, 2026.
Overview
Type: OpenClaw Skill Name: ziwei-verify Version: 1.0.0 The ziwei-verify skill bundle is a well-structured and documented engine for birth time calibration in the context of Ziwei Dou Shu (Chinese astrology). The code implements logic for generating time offsets, calculating matching scores based on astrological verification points, and providing interactive dialogue handling for users. Analysis of the Python source files (main.py, calibrator.py, prompt_generator.py) and documentation reveals no evidence of data exfiltration, malicious execution, or prompt injection; the system uses standard environment variable configuration (config.py) and local data processing with legitimate dependencies like 'zhdate'.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Manual dependency installation can introduce version or provenance risk if the package source is not checked.
The skill documents a Python package dependency, while the provided install specification says there is no install spec; users may need to install an unpinned dependency manually.
- **Python Libraries**: `zhdate`（农历转换）
Use a reviewed, pinned dependency declaration or verify the package and version before installing.
Running the demo or tests may execute dynamically loaded local code.
The static scan reports dynamic module execution in demo/test code. This can execute code from a dynamically loaded module if the demo or test is run, though the artifacts do not show it being run automatically during install or normal use.
spec.loader.exec_module(pg)
Inspect demo/test files before running them, and prefer normal imports or clearly scoped test helpers.
Personal birth information and chart data may be processed by the dependent `ziwei` skill.
The skill depends on another skill to compute charts, so birth time and related chart data are expected to flow to the `ziwei` skill.
- **Required Skills**: `ziwei`（提供命盘计算）
Use this only with a trusted `ziwei` skill implementation and understand that calibration requires sharing the input packet with that dependency.
Interactive calibration data may remain in memory for the lifetime of the process unless explicitly cleared.
Interactive mode stores session state containing the original packet, birth time, and candidates in process memory; the cleanup method is present but currently `pass`.
self.sessions: Dict[str, DialogueState] = {}Implement timestamp-based session expiration and clear sessions after confirmation, skip, or timeout.