v2.1.0

职业与健康命理分析

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 8:21 AM.

Analysis

This appears to be a local astrology-style career and health report tool, with no artifact evidence of credential use, data sharing, persistence, or destructive actions.

GuidanceSecurity-wise, the provided artifacts look proportionate for a local 命理 analysis skill. Before installing or running it, verify any missing Python dependency such as sxtwl from a trusted source, and treat the health-related output as fortune-telling guidance rather than medical advice.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Agentic Supply Chain Vulnerabilities

SeverityInfoConfidenceHighStatusNote

calc/bazi.py

import sxtwl

The code depends on an external calendar library, while the supplied install information says there is no install spec. This is under-documented dependency provenance, but the artifacts do not show remote downloads, hidden installers, or automatic execution.

User impactIf the local code is run, a user or agent may need to resolve a Python dependency that is not pinned or documented in the install metadata.

RecommendationDocument the exact dependency and trusted version, preferably with a requirements or lock file; users should install any missing package only from trusted sources.