Security checks across malware telemetry and agentic risk
This fortune-telling skill mostly does what it claims, but its helper scripts handle personal birth details and API credentials with broader access than the metadata and privacy disclosures make clear.
Review before installing. Treat this as an entertainment skill that may send names, birth details, questions, and generated prompts to MiniMax. Only run the helper scripts if you are comfortable with them reading your Clawd environment file, verify MINIMAX_API_HOST points to the intended MiniMax endpoint, and delete generated /tmp JSON files if you do not want local reading records retained.
)
try:
with urllib.request.urlopen(req, timeout=60) as response:
result = json.loads(response.read().decode('utf-8'))
if result.get('base_resp', {}).get('status_code') == 0:
return result65/65 vendors flagged this skill as clean.