Fortune Hub — 运势测算统一入口
v1.0.0运势测算的统一导航入口,适合用户知道想算命但尚未确定领域时触发。 该 Skill 识别用户意图后,引导选择玄学领域(星座、八字、紫微斗数、塔罗、数字命理、梅花易数等), 智能收集各领域所需的出生信息,通过 MEMORY.md 实现跨领域档案共享,一次录入多处复用, 最终路由到对应专业 Skill。 触发词:运势、...
⭐ 0· 183·1 current·1 all-time
byeamanc@eamanc-lab
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (a unified entrypoint that routes to domain-specific fortune-telling Skills) matches the SKILL.md instructions. Reading and writing a local MEMORY.md to collect birth date, time, name, etc., and then routing to specialized Skills is expected for this purpose. No unrelated binaries, env vars, or external services are requested.
Instruction Scope
Instructions explicitly require proactively reading MEMORY.md on each trigger and writing/updating it when fields are missing. That behavior is coherent with the routing/recall purpose, but it means the agent will persistently store and automatically reuse sensitive PII (birth date/time, full name, birthplace, gender) without re-confirmation on each use. The instructions do not reference any other system files or external endpoints, which is good; the primary concern is persistent PII retention and automatic reading on each invocation.
Install Mechanism
No install spec and no code files (instruction-only). This minimizes filesystem/installation risk — nothing is downloaded or executed beyond the platform's normal handling of SKILL.md.
Credentials
The skill requests no environment variables or credentials (good). However, it collects and persists sensitive personal information in MEMORY.md (PII), which is proportionate to fortune-telling functions but still a privacy-sensitive data surface that the user should consider before enabling.
Persistence & Privilege
always is false and the skill does not request elevated privileges. It does, however, intentionally create/modify a persistent local file (MEMORY.md) to store user data. This is expected for a memory/cache feature, but persistent storage of personal data increases blast radius if the repository or workspace is shared or if other Skills/agents can access the same directory.
Assessment
This Skill is coherent and appears to do what it says (route to domain Skills and reuse saved user info). Before installing, consider privacy: it will store personal data (birth date/time, full name, birthplace, gender) in a local file named MEMORY.md and will automatically read that file on every trigger. If you plan to use it, (1) ensure the workspace/repository where MEMORY.md will be written is private or access-controlled, (2) confirm how long data is retained and whether you can delete or export it, (3) prefer entering only the minimal fields needed for a given session (or use '不详' for unknowns), (4) verify the downstream domain Skills (horoscope, bazi, tarot, etc.) are trustworthy before routing sensitive data to them, and (5) ask the developer to add explicit user consent prompts and a clear memory-deletion command if you need stronger privacy controls.Like a lobster shell, security has layers — review code before you run it.
latestvk978xyftjpz7mgsb2kg4j5y94d83ctj9
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
