彩票分析助手

PassAudited by ClawScan on May 1, 2026.

Overview

The skill appears to be a local lottery-data analysis helper with no evidence of credential use, network transfer, hidden persistence, or destructive behavior.

This skill looks coherent for local lottery analysis. Before installing or using it, remember that it runs a local Python script and reads the Excel/CSV files you point it at; use only intended lottery data and do not treat its number recommendations as guaranteed outcomes.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI05: Unexpected Code Execution

What this means

Running the skill can execute its included Python analyzer against lottery data files you choose.

Why it was flagged

The skill asks the user or agent to execute a local Python script. This is central to the lottery-analysis purpose and is disclosed, but it is still local code execution users should recognize.

Skill content

python3 ~/.openclaw/skills/lottery-analyzer/scripts/analyze_lottery.py ssq /path/to/data.xlsx 7+2

Recommendation

Only run it on intended Excel/CSV files and review the local script if you need assurance before execution.

Info

#ASI02: Tool Misuse and Exploitation

What this means

The script can read the spreadsheet or CSV path supplied by the user for analysis.

Why it was flagged

The analyzer reads a file path supplied to it and parses Excel/CSV data. This is expected for the skill, but users should provide only the lottery data files they intend to analyze.

Skill content

if filepath.endswith('.xlsx') or filepath.endswith('.xls'):
                self.data = pd.read_excel(filepath

Recommendation

Provide specific lottery-history files rather than broad or sensitive local files.