Star Mansion Master
v1.0.0Chinese 28 Star Mansions (二十八星宿) expert system for personality analysis, relationship compatibility (合盘), and social media content creation. Use when user me...
⭐ 0· 68·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the included files and runtime instructions. All declared capabilities (查宿, 合盘, 内容生产, 评论回复) are implemented via the provided knowledge and templates; nothing in the package requires unrelated credentials or external services.
Instruction Scope
The SKILL.md instructs the agent to check for EXTEND.md in project/XDG/home locations and, if absent, run a first-time setup that saves EXTEND.md into $HOME/.baoyu-skills/... — i.e., the skill will read and potentially write user config files outside the skill directory. That behavior is plausible for personalization, but it is file system access beyond the skill's own bundle and should be expected by the user. The skill also instructs the agent to solicit users' lunar birthdays (month+day) and to steer some interactions toward private messages or paid readings (business behavior encoded in reply patterns). There are no instructions to call external endpoints or access other system areas.
Install Mechanism
Instruction-only skill with no install spec, no downloaded artifacts, and no binaries required. This minimizes execution/install risk.
Credentials
The skill requests no environment variables or credentials. However, it reads/writes local config files (EXTEND.md) under project, XDG_CONFIG_HOME, or $HOME paths; that file may contain account name, platform choice, and monetization preferences. The skill also collects personal data (users' lunar birth month+day). These actions are proportionate to personalization and its stated social‑media/content purpose, but they involve PII and writing to the user's home filesystem.
Persistence & Privilege
always:false (no forced global inclusion). The skill intends to persist user preferences by writing EXTEND.md under .baoyu-skills in project or the user's home config — a limited, local persistence. It does not request elevated system privileges or modify other skills' configs per the provided files.
Assessment
This skill is internally coherent and appears benign, but note the privacy/scope implications before installing: 1) It will check for and, if needed, create a small configuration file (EXTEND.md) under project or your home config (~/.baoyu-skills/star-mansion-master). Inspect that file's contents and location before allowing writes. 2) The skill asks for users' lunar birthdates (month+day) to compute star mansions — consider whether you want to share those dates (you can avoid sharing year if unsure). 3) Reply patterns explicitly encourage guiding users to private messages and paid readings; if you don't want monetization flows or DM prompts, review/adjust the reply templates. 4) There are no network calls, installs, or credential requests in the package, so the technical risk is low, but the privacy choices above matter. If you want additional assurance, run the agent in a sandboxed environment or inspect/approve the EXTEND.md content and any writes before enabling the skill.Like a lobster shell, security has layers — review code before you run it.
latestvk9774xqb9j1yayndp1ax22b30983jrz7
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
