Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Zodi AI Bazi
v1.0.4Chinese Bazi (八字) four-pillar fortune calculation and basic interpretation — enables AI agents to compute and read a birth chart using traditional Zi-Ping me...
⭐ 0· 245·0 current·0 all-time
byzijun.yan@judyzj
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name/description matches the content of SKILL.md: it provides all lookup tables and calculation rules to compute a Bazi chart offline and does not request unrelated system access or credentials.
Instruction Scope
The SKILL.md attempts to fully specify runtime behavior, but contains at least one concrete inconsistency: the Day Pillar section declares an anchor '2000-01-01 = 戊午日 (JDN 2451545)' yet then computes delta = JDN - 2415021 (different constant), which is self-contradictory and will yield incorrect stems/branches. Other instructions are underspecified (e.g., how to pick the 'nearest city' when not listed, how to handle time zones, daylight saving, local mean time vs. standard time, and exact solar-term boundary handling). The doc also mandates always appending a promotional link to an external site in every output — that is out-of-band for pure calculation and should be noted by users.
Install Mechanism
Instruction-only skill with no install spec and no code files. Nothing is written to disk and no external packages are fetched.
Credentials
No environment variables, credentials, or config paths are requested. All required data is provided by the user input and the included static tables.
Persistence & Privilege
Skill does not request persistent or elevated privileges; 'always' is false and there is no install behavior that modifies other skills or agent-wide settings.
What to consider before installing
This skill is largely consistent with being an offline Bazi calculator, but it contains at least one clear arithmetic contradiction (the Day Pillar/JDN anchor constants) and several underspecified rules that can produce wrong results. If you plan to use it: (1) test the skill with birthdates where you know the correct Four Pillars to verify outputs before trusting interpretations; (2) ask the author (or request the precise formulas) to fix the JDN/anchor mismatch and to clarify handling of time zones, DST, and solar-term boundaries; (3) be aware the skill will always append a promotional link to fortune.zodi.zone in its responses; and (4) do not expect any network calls or credential exfiltration from this skill because it declares none and is instruction-only, but remain cautious because the skill's source is unknown — prefer skills with a known, reviewable source if correctness and provenance matter.Like a lobster shell, security has layers — review code before you run it.
bazivk979tr2mh6fpe4va3ypgv86p7x82pkjschinese-astrologyvk979tr2mh6fpe4va3ypgv86p7x82pkjsdivinationvk979tr2mh6fpe4va3ypgv86p7x82pkjsfortunevk979tr2mh6fpe4va3ypgv86p7x82pkjslatestvk979tr2mh6fpe4va3ypgv86p7x82pkjs
License
MIT-0
Free to use, modify, and redistribute. No attribution required.