Lunar Calendar
WarnAudited by ClawScan on May 10, 2026.
Overview
The calendar function is mostly coherent, but the package includes unrelated GitHub publishing scripts that use credentials and change the local environment, and it overstates some unfinished features.
Install only if you need the lunar-date calculator, and review the package before running any shell scripts. Do not run the GitHub publishing helpers unless you intentionally want to publish this project and understand the token/account effects. Use a virtual environment, verify dependencies, and treat solar-term/almanac outputs as reference results until the documented unfinished features are corrected.
Findings (5)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If run, this could use your GitHub account to create or push to a public repository and may leave your token stored in local Git configuration.
The script requires a GitHub token, creates a public repository, pushes files, and embeds the token in the git remote URL. This credentialed account mutation is not needed for a lunar-calendar query skill and is not declared in the registry requirements.
Authorization: token $GITHUB_TOKEN ... "private": false ... git remote add origin https://$GITHUB_TOKEN@github.com/xiamuciqing/lunar-birthday-reminder.git
Do not run this script for calendar use. Remove it from the skill package or isolate it as a separate publishing tool; if used, use a least-privilege token and avoid putting tokens in remote URLs.
Running it could overwrite your global Git author settings and package or commit more files than you intended.
This shell script changes global Git identity, commits all files, tags a release, and packages the directory. Those actions are release-management behavior, not calendar calculation, and they can affect the user's environment if run.
git config --global user.name "夏暮辞青" ... git add . ... git commit ... git tag v0.9.0 ... tar -czf ../lunar-birthday-reminder-v0.9.0.tar.gz .
Keep release automation outside the installed runtime skill, avoid global Git configuration changes, and require explicit review before committing, packaging, or publishing files.
The agent may give authoritative-looking answers for features the project itself says are still pending or incomplete.
This artifact says solar-term and almanac features are not yet integrated or complete, while the skill description presents precise solar-term and almanac output as core capabilities.
待验证功能 ... 节气计算: 需要集成 ... 黄历宜忌: 需要完善
Align SKILL.md with implemented features, preserve the reference-version caveat in normal outputs, and avoid forcing certainty for unvalidated results.
Dependency or release contents could change over time, causing unexpected behavior or installation failure.
The install documentation uses external downloads and unpinned Python packages, and references an installer script not shown in the provided manifest. These are user-directed setup steps, but provenance and versions should be checked.
wget https://github.com/.../lunar-birthday-reminder-v0.9.0.tar.gz ... ./install.sh ... pip install lunardate cnlunar
Pin dependency versions, publish checksums or signatures, include all referenced installer files in the package, and prefer a virtual environment.
The skill depends on local script behavior and installed Python packages for results.
The skill is designed to execute a local Python script for deterministic calendar calculations. This is purpose-aligned, but it is still local code execution triggered by date queries.
你必须直接调用 `scripts/lunar_calculator.py` ... python scripts/lunar_calculator.py --solar 2026-02-13
Inspect the calculator script and dependencies before use, run it in a constrained environment, and avoid executing unrelated helper scripts.