Daily Bazi Analysis
v1.0.4面向“今日运势/今天适合做X吗/今日宜忌”类咨询的八字日运解读技能。使用场景：用户在 OpenClaw 中询问当日运势、某事项是否适合今天做、今日吉凶与建议时触发。技能会自动读取当前日期，查询当日对应的流年、流月、流日，并结合用户的八字四柱进行分析；若用户为首次使用且无个人四柱记忆，先引导用户提供四柱并写入长期记...
⭐ 1· 553·1 current·1 all-time
byliliishere@lilir-is-here
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (daily Bazi analysis) match what the files and instructions do: use local classical texts A/B/C, a bundled daily calendar SQL, and per-user four-pillar profiles. Requiring access to session user_id/user_timezone and a heartbeat get/upsert to store/retrieve four-pillar profiles is proportionate to the stated personalized service.
Instruction Scope
SKILL.md explicitly instructs the agent to extract user_id and user_timezone from session context, compute today_local, call internal heartbeat events (bazi_profile_get/upsert), query the local bazi_daily_calendar, and read local classic text files. These actions are necessary for personalization and correct date-scoped lookups, but they do mean the skill will access user identifiers and persist four-pillar data to long-term memory and will log several request-level fields. The skill also mandates not fabricating missing calendar/classic data and to surface coverage gaps — this is a safe guard but may cause frequent partial results until classics are regenerated.
Install Mechanism
No install spec (instruction-only) and bundled scripts/data are local files. The two utility scripts (PDF text extraction and xlsx->SQL import) require common Python libraries (pypdf, openpyxl) but are maintenance tools, not invoked automatically by the skill at runtime. No external downloads, shorteners, or arbitrary extract/install steps are present.
Credentials
The skill declares no required env vars or external credentials. It does depend on internal platform services (heartbeat and an internal DB/table bazi_daily_calendar) and requires writing/reading per-user profile keys and logging fields. These are proportionate to the purpose, but users should be aware that personal data (four pillars, user_id, timezone) will be stored and logged per the skill's mandatory logging contract.
Persistence & Privilege
always:false and normal autonomous invocation settings. The skill deliberately writes to long-term memory (heartbeat upsert) and requires persistent built-in calendar data; this is expected. There is no attempt to modify other skills or system-wide configs. The mandatory logging fields require recording user_id and other metadata — a privacy consideration but not a privilege escalation.
Assessment
This skill appears to do what it says: personalized daily Bazi analysis using local classic text files and a built-in calendar. Before installing, note: (1) it will read your session user_id and user_timezone and will store your four-pillar (year/month/day/hour) profile in long-term memory via the platform heartbeat API — decide if you want that personal data persisted; (2) each request will record mandatory logging fields (user_id, timezone, today_local, memory_hit, calendar_hit, heartbeat statuses, etc.), so check your privacy policy and retention rules; (3) the package includes tools to regenerate classic texts and to import calendar xlsx files — running those requires Python (pypdf, openpyxl) and local PDF/XLSX sources and is an admin action, not automatic; (4) the included classic-text cache has documented coverage gaps, so some analyses will explicitly mark missing-source caveats rather than silently fabricating; and (5) no external network endpoints or secret environment variables are requested by the skill. If you accept storing the simple profile data and the logging behavior, the skill is coherent and reasonable for its purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk974e8srbs3rrgxvwmavz64mf583h7wy
License
MIT-0
Free to use, modify, and redistribute. No attribution required.