Yun Shi
v1.1.2提供每日运程推送，支持八字、紫微斗数、奇门遁甲占卜，合婚风水分析及事业财运健康感情解读。
⭐ 5· 179·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Chinese astrology, daily push, BaZi/Ziwei/QiMen/etc.) match the included scripts and declared node dependency (iztro). Minor mismatch: SKILL.md mentions installing both 'iztro' and 'lunar-typescript' while the install metadata/ package.json explicitly lists only 'iztro' (lunar-typescript appears transitively in package-lock). Overall dependencies are proportionate to the stated purpose.
Instruction Scope
Runtime instructions tell the agent to run local node scripts and configure cron; scripts read/write data/profiles under the skill workspace and optionally read a knowledge directory (OPENCLAW_KNOWLEDGE_DIR). No instructions to access unrelated system config, secrets, or external APIs; the optional knowledge-dir reading means the skill can parse files from a path you provide.
Install Mechanism
No remote download URLs or arbitrary extract steps; install uses standard npm package(s) (iztro) appropriate for astrology calculations. This is a typical, expected install method for a Node-based skill.
Credentials
The skill requires Node.js >=18 and has one optional env var OPENCLAW_KNOWLEDGE_DIR to point at a local knowledge-base; it does not require secret tokens or unrelated credentials. Note: if you set OPENCLAW_KNOWLEDGE_DIR to a path, the skill will read .md files there — only set it to directories you trust.
Persistence & Privilege
always is false; skill stores user profiles under its own data/profiles/* and provides scripts to manage them. It does not request permanent platform-wide privileges or modify other skills. Cron instructions are optional and run the skill's own push script.
Assessment
This skill appears to do what it says: local astrology algorithms and scheduled pushes. Before installing: (1) be aware user personal data (names, birthdates, family) is stored under the skill's data/profiles directory — restrict filesystem access and back up or remove sensitive files as needed; (2) the optional OPENCLAW_KNOWLEDGE_DIR causes the skill to read all .md files in that directory — do not point it at sensitive system directories; (3) the skill installs an npm dependency (iztro) — review dependencies if you require vetted packages; (4) review the daily-push.js / push-toggle.js scripts if you plan to enable cron pushes so you understand how and when notifications are scheduled. No credentials or external endpoints are required by default.Like a lobster shell, security has layers — review code before you run it.
latestvk970ek3kjch63545mtwme3bced83xzfg
License
MIT-0
Free to use, modify, and redistribute. No attribution required.