Bigyou
v1.0.0比优 —— 选项比较与决策工具。 当用户面对多个选项不知道如何抉择时激活，包括：选offer、选方案、选工具、选路径、选策略等任何需要做比较和决策的场景。 激活词：帮我选、哪个好、比一比、怎么选、纠结、选哪个、几个选项、选哪个好、A还是B、好难选 核心方法：先跳出选项构建目标画像（底线否决 + 加分项量化打分），...
⭐ 0· 36·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description (decision helper) match the included assets: SKILL.md describes a structured decision flow and scripts/analyze.py implements text extraction, scoring, and report generation. Required env vars, binaries, and install steps are absent — which is proportionate for a local analysis utility.
Instruction Scope
SKILL.md stays on-topic (build profile, filter by bottom-lines, weighted scoring, produce a report). Two issues to note: (1) a pre-scan flagged unicode-control-chars in SKILL.md which can be used to hide text or influence model parsing — this should be inspected/removed; (2) a minor logic mismatch: the documentation emphasises strict bottom-line elimination, but the code treats baseline passing as scores >=3 (not strictly 'fail if not met'), which can make '底线' behavior more permissive than promised.
Install Mechanism
No install spec, no downloads, and no external package installation. The skill is instruction-only plus a local Python script; risk from installation mechanism is low.
Credentials
The skill declares no required environment variables, no credentials, and no config paths. The included code does not access environment variables or network resources — credential access is not requested or required.
Persistence & Privilege
always:false and no special privileges are requested. The skill does not attempt to modify other skills or system-wide agent settings; it runs as a local analysis helper.
Scan Findings in Context
[unicode-control-chars] unexpected: Hidden/unicode control characters were detected in SKILL.md. They are not necessary for a decision-helper skill and can be used to obfuscate text or influence model parsing. Inspect SKILL.md for unexpected invisible characters and remove them if present.
Assessment
This skill appears to do what it says: local parsing of a user's choice question, building a weighted profile, scoring options, and returning a report. Before installing/using: 1) Inspect SKILL.md for any invisible/unicode-control characters (the pre-scan flagged such characters) and remove them if unintended. 2) Review scripts/analyze.py locally — it contains all logic and does not make network calls or read credentials, but check you are comfortable running the Python script. 3) Note the implementation detail: '底线' (bottom-line) is treated permissively in code (baseline pass uses score >=3), so if you expect strict elimination adjust the script or confirm the behavior. 4) Run the script on sample inputs to verify option extraction and scoring meet your expectations. If you want to be extra cautious, run the code in an isolated environment (container/VM) before adding it to a production or high-privilege agent.Like a lobster shell, security has layers — review code before you run it.
latestvk977yeeeyxmmxmfvnmsz8834y184vked
License
MIT-0
Free to use, modify, and redistribute. No attribution required.