Bazi Pan
v1.0.0八字排盘，根据出生年月日时排八字、大运、流年，分析五行强弱与命理特点
⭐ 0· 308·0 current·0 all-time
byMingo_318@mingo-318
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
The skill description and SKILL.md say it supports农历 (lunar) input and must be used to obtain accurate 排盘 results, but the included bazi.py does not implement any lunar-to-solar conversion or calendar library. The script simply interprets the provided integers as year/month/day/hour and uses simplified formulas (e.g., get_day_gan_index uses a crude linear formula) — this is insufficient for accurate traditional 八字 calculations. The required binaries list only python3 which is proportionate, but the core capability (accurate lunar-based 排盘) is not implemented.
Instruction Scope
SKILL.md instructs invoking the script with an example containing minutes (e.g., 14:30), and states '必须调用脚本获取准确排盘结果'. The script's CLI expects an integer hour (example usage in the script: python bazi.py 1990 8 15 14) and outputs hour:00. The SKILL.md and the script disagree on time format and on whether lunar conversion is handled. The instructions do not direct any unrelated data access or network calls.
Install Mechanism
There is no install spec (instruction-only skill with one local Python script). No external downloads or install steps are requested, so nothing is written to disk beyond the provided file — low install risk.
Credentials
The skill requires only python3 and declares no environment variables, credentials, or config paths. The script does not read environment variables or secrets. Requested environment access is minimal and appropriate for the script.
Persistence & Privilege
always is false and the skill does not request persistent/privileged presence. It does not modify other skills or system configuration. It can be invoked autonomously (platform default), which is noted but not combined with other high-risk indicators.
What to consider before installing
This skill's code is local and does not exfiltrate data or request secrets, but it is internally inconsistent with its documentation: it claims to accept lunar (农历) input and produce accurate charts, yet bazi.py treats inputs as plain integers, uses simplified formulas, and only expects an integer hour (not minutes). Before installing/using: (1) do not rely on its results for important decisions — validate outputs against a trusted 八字 tool or known examples, (2) if you need true lunar-date handling ask the author or update the script to perform lunar<->solar conversion (e.g., using a proven calendar library), and (3) correct the invocation format in SKILL.md (script expects hour as integer). If you are uncomfortable with autonomous invocation, disable model invocation for this skill or require explicit user confirmation before calling it.Like a lobster shell, security has layers — review code before you run it.
latestvk97fv7pmwva1phpwywcbmy6x8d82c982
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📊 Clawdis
Binspython3