ClawHub

Star Sign / Horoscope Inquiry - 星座运势查询

v1.0.4

查十二星座列表与每日/周/月/年运势。当用户说：天蝎座今天运势？双子座本周财运？或类似星座运势问题时，使用本技能。

⭐ 10· 426·3 current·3 all-time
by极速数据@jisuapi
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the actual behavior: the skill queries JisuAPI horoscope endpoints and only requires python3 and a JISU_API_KEY, which are appropriate for this purpose.
✓
Instruction Scope
SKILL.md and astro.py limit actions to calling JisuAPI endpoints (/astro/all and /astro/fortune) and returning the API result. Instructions require the API key and show how to call the script; they do not request unrelated files, other credentials, or unexpected external endpoints.
ℹ
Install Mechanism
No install spec (instruction-only) which is low risk. One practical inconsistency: astro.py imports the Python 'requests' package but the metadata does not declare or install this dependency — the runtime will fail unless 'requests' is present. This is an engineering oversight, not a malicious indicator.
✓
Credentials
Only JISU_API_KEY is required and that is the legitimate API credential needed to call the JisuAPI service. There are no unrelated credentials or broad environment/config path requests.
✓
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system config, and is invoked only when the user/agent chooses it. Normal autonomous invocation is allowed but not excessive here.
Assessment
This skill appears to do exactly what it claims: call JisuAPI to get horoscope data. Before installing: (1) Be aware that your JISU_API_KEY will be sent to api.jisuapi.com when the skill runs — only use a key you trust to share with that service. (2) Ensure the runtime has the Python 'requests' package (pip install requests) since astro.py depends on it but the skill metadata doesn't declare or install it. (3) If you need offline or private data handling, avoid providing your real API key or confirm the provider's data/privacy policies.

Like a lobster shell, security has layers — review code before you run it.

latestvk970df4xsd2s1h8syzd9nk8rd984448n

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

✨ Clawdis
Binspython3
EnvJISU_API_KEY
Primary envJISU_API_KEY

Comments