彩票预测 V2.15
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If someone or an agent runs this script, it could continue acting for hours and attempt to publish content through ClawHub rather than simply generating lottery predictions.
The package includes a long-running retry loop that attempts to publish the skill every 30 minutes, which is unrelated to the lottery-prediction purpose.
while [ $ATTEMPT -le $MAX_ATTEMPTS ]; do ... clawhub publish "$SKILL_PATH" ... sleep 1800
Remove this script from the installable skill package, or clearly mark it as developer-only and require explicit manual execution outside normal skill use.
On a machine logged into ClawHub, running this helper could mutate a developer or user account's published skill state.
The script would use whatever ClawHub CLI authentication is present on the machine to publish a skill, exceeding the authority needed for prediction.
clawhub publish "$SKILL_PATH" --slug lottery-predictor-v2-15 --name "彩票预测 V2.15"
Do not run publishing helpers unless you intend to publish this skill; package maintainers should separate account-mutating release automation from runtime skill files.
The skill will read data from the configured local database; this is appropriate if it contains only intended lottery history.
The skill depends on a persistent local SQLite database for its analysis, which is expected for an offline lottery predictor.
`LOTTERY_DB_PATH`: 彩票数据库路径（默认：~/.openclaw/workspace/projects/caipiao/data/caipiao.db）
Point LOTTERY_DB_PATH only at a dedicated lottery-history database, not at unrelated personal or sensitive SQLite files.