Bank Card Origin Query - 银行卡归属地查询
v1.0.4根据银行卡号查发卡行与归属地，可做卡号格式校验。当用户说：6222 开头是哪家银行？这张卡号对不对？或类似银行卡归属问题时，使用本技能。
⭐ 10· 402·1 current·1 all-time
by极速数据@jisuapi
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, required env var (JISU_API_KEY), and the code all point to using JisuAPI's bankcard query endpoint. The requested credential is the AppKey the API needs, which is proportional to the stated purpose. Minor omission: the script imports the Python 'requests' library but SKILL.md only lists 'python3' as a required binary (no explicit mention of the requests dependency).
Instruction Scope
SKILL.md instructs running the included script with a JSON containing 'bankcard'. The script sends the bankcard number and the AppKey to https://api.jisuapi.com/bankcard/query and prints the API result. That network call is necessary for the described functionality but means user-supplied card numbers are transmitted to a third-party service (privacy exposure).
Install Mechanism
No install spec (instruction-only + single script). Nothing is downloaded or written to disk by an installer. The only dependency risk is runtime: the script requires the Python 'requests' package, which isn't declared in SKILL.md; this is a usability omission, not a security problem.
Credentials
Only JISU_API_KEY is required and is appropriate for calling JisuAPI. However, the AppKey grants the skill the ability to query the external API (and potentially consume quotas or be charged), so treat the key as sensitive and use least-privilege / monitoring. Also: the skill transmits sensitive personal data (bank card numbers) to the external provider — consider privacy implications before supplying real card numbers.
Persistence & Privilege
Skill is not 'always:true' and does not request to modify other skills or system settings. Agent autonomous invocation is allowed by platform default but is not combined here with elevated privileges.
Assessment
This skill is coherent with its description and uses the JisuAPI service to look up bank-card origin, but it WILL send the bank-card number you provide to a third-party (api.jisuapi.com). Before installing: ensure you trust JisuAPI for handling sensitive data; only supply an AppKey with appropriate limits; monitor API usage and quotas; avoid sending full real card numbers if privacy concerns exist (use partial numbers or local Luhn checks for basic validation). Also ensure the runtime environment has Python and the 'requests' package installed; rotate the AppKey if it is ever exposed.Like a lobster shell, security has layers — review code before you run it.
latestvk975nh9ye4wkx9k0e9yhsppm2h8454pk
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
💳 Clawdis
Binspython3
EnvJISU_API_KEY
Primary envJISU_API_KEY