Security audit
🔮 循古·算命（八字·每日运势·六爻·大六壬·禄命·大运流年）
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed Chinese divination helper that sends user-provided birth or casting data to xungufa.com and only stores birth profiles locally after consent.
Install only if you are comfortable sharing birth details, casting times, and optionally an API token with xungufa.com. Do not save a local birth profile unless you want future sessions to reuse that data.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
63/63 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.