Mountain Daoist Guide
v2.1.0This skill triggers when the user asks for daily advice, weather, a morning routine, calendar reading, or uses phrases like "今天气象如何", "翻翻老黄历", "今天怎么样", or "出...
⭐ 0· 103·0 current·0 all-time
by@jkzfhq
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description ask for daily advice combining solar-term and weather data; SKILL.md matches that purpose and does not request unrelated credentials, binaries, or config paths. The package.json metadata (homepage, price) is consistent with a published content skill.
Instruction Scope
SKILL.md requires combining '今日真实历法/节气数据' and '本地天气数据' but does not specify sources or exact steps. This leaves broad discretion to the agent to fetch data (e.g., call web APIs or local tools). The instructions do not direct reading unrelated files or secret env vars and explicitly forbid superstition-related outputs.
Install Mechanism
No install spec and no code files beyond package.json and SKILL.md — instruction-only skill with minimal disk footprint and low install risk.
Credentials
The skill declares no required environment variables, credentials, or config paths. The guidance to use weather/calendar data is appropriate for its purpose and does not demand unrelated secrets.
Persistence & Privilege
always:false and user-invocable:true (defaults) — standard behavior. The skill does not request persistent system privileges or modification of other skills' configs.
Assessment
This skill appears coherent and lightweight: it asks for no secrets or installs and its instructions align with providing daily guidance. Two things to note before installing: (1) The SKILL.md is vague about where to fetch 'real' calendar and local weather data — the agent may call external APIs or use location information to do so, which can transmit your location/date context. If you care about privacy, either restrict the agent's network/tools or provide the weather/calendar data yourself. (2) package.json includes a homepage and a listed price even though registry metadata showed none—this is likely metadata only but worth checking on the publishing platform if you expect a paid purchase. If you want stricter behavior, ask for an explicit data source (e.g., a trusted weather API) or require no external network calls.Like a lobster shell, security has layers — review code before you run it.
chinese-traditionvk977tymkw9xxs3tsb9ssnpx4f1836x0edaily-routinevk977tymkw9xxs3tsb9ssnpx4f1836x0elatestvk977tymkw9xxs3tsb9ssnpx4f1836x0emindfulnessvk977tymkw9xxs3tsb9ssnpx4f1836x0eproductivityvk977tymkw9xxs3tsb9ssnpx4f1836x0etaoismvk977tymkw9xxs3tsb9ssnpx4f1836x0e
License
MIT-0
Free to use, modify, and redistribute. No attribution required.