ClawHub

Daily Astro

v1.0.0

西方星座每日运势 — 12星座今日运程、幸运元素、爱情事业财运指数，中英双语精美卡片。Daily Western horoscope for all 12 zodiac signs — love career finance scores, lucky elements, bilingual EN/CN. Tri...

⭐ 0· 47·0 current·0 all-time
by@jiajiaoy
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (daily horoscope + push) align with the included scripts: morning/evening push generators and a push-toggle script. The code supports scheduling pushes to channels and persisting per-user settings under data/users, which is expected for this functionality.
✓
Instruction Scope
SKILL.md and the scripts limit actions to printing generation prompts and managing per-user JSON files. There are no instructions to read arbitrary system files, environment secrets, or to send data to external HTTP endpoints from within the skill.
✓
Install Mechanism
There is no install spec (instruction-only install) and all code is included in the package. Nothing is downloaded or extracted at install time.
✓
Credentials
The skill requires no environment variables or external credentials. It only reads/writes JSON files in a local data/users directory, which is proportionate to storing push preferences.
ℹ
Persistence & Privilege
always:false (good). The skill emits __OPENCLAW_CRON_ADD__/__OPENCLAW_CRON_RM__ markers to register scheduled runs with the platform; that is expected for a push-scheduling skill but does grant the platform permission to invoke the skill's scripts on schedule. The skill does not modify other skills or request broader system privileges.
Assessment
This skill appears to do what it says: generate bilingual horoscope text and manage scheduled pushes. Before installing, consider: (1) it will create and update per-user JSON files under the skill's data/users directory; (2) enabling push will register scheduled jobs with the hosting platform (the platform will autonomously run the scripts at the scheduled times); (3) this skill does not request any API keys or access external endpoints itself — you should verify that your platform's channel integrations (telegram/feishu/slack/discord) are configured safely and that you trust the platform to run scheduled jobs. If you want to review behavior further, inspect data/users contents and the platform's handling of __OPENCLAW_CRON_ADD__ entries.

Like a lobster shell, security has layers — review code before you run it.

latestvk972wsebap6pa7z4sjw794pkvs844q97

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments