Huangdaxian Lingqian

PassAudited by VirusTotal on May 5, 2026.

Overview

Type: OpenClaw Skill Name: huangdaxian-lingqian-skill Version: 2.0.4 The skill bundle implements a traditional Chinese fortune-telling (Wong Tai Sin) simulator. The instructions in SKILL.md and README.md are strictly focused on defining the output format (fortune sticks, poems, and interpretations) and handling user interactions in a thematic manner. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found. While a CLI script (references/huangdaxian.py) is mentioned in the documentation, the provided content contains no suspicious logic or unauthorized access requests.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The chat-based skill can still work as instructions, but the optional CLI commands may fail or require a separate file that was not reviewed here.

Why it was flagged

The skill documents an optional Python helper, but the supplied manifest/file contents do not include `references/huangdaxian.py`; there is no automatic execution, but the referenced helper cannot be reviewed or run from this package.

Skill content
如需在命令行快速抽签,可使用 `references/huangdaxian.py`: ... `python references/huangdaxian.py --help`
Recommendation

Use the conversation mode unless the Python file is actually present and you inspect it before running it.

What this means

The agent may produce fortune text that is not actually backed by a bundled complete source, so exact traditional wording may be unreliable.

Why it was flagged

This reference file says only partial entries are included and points to websites for the complete 100, while the skill description claims complete built-in data; this is a capability/provenance mismatch rather than malicious behavior.

Skill content
## 已收录签文(部分) ... ## 完整100签请至以下网址查询
Recommendation

Treat outputs as entertainment/reference and verify against a trusted source if exact签文 matters.