Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (排列五分析工具) align with the provided script and SKILL.md: both implement analysis, random picks, simple calculations and display guidance. There are no unrelated credential or service requests.
Instruction Scope
SKILL.md directs the agent to run the included shell script and documents its commands. The instructions do not ask the agent to read arbitrary files, transmit data externally, or access unrelated system configuration. The SKILL.md does declare override-tools (exec, web_search) but the shipped code only uses local shell execution; web_search is not used.
Install Mechanism
No install spec is present and only a small shell script is included. Nothing is downloaded or extracted from external URLs.
Credentials
The skill requests no environment variables or credentials. The script uses standard command-line utilities (od, bc, tr, echo) and /dev/urandom; these are reasonable for the functionality but the package did not list required binaries—this is an implementation completeness note rather than a security concern.
Persistence & Privilege
always is false and the skill does not modify other skills or system settings. Autonomous invocation is allowed (platform default) but the skill's scope is limited and local.
Assessment
This skill is a small, local Bash tool for lottery analysis and appears coherent with its description. Before installing or running: 1) inspect the included scripts (you already have scripts/main.sh) — it does not perform network calls or exfiltrate data; 2) note it uses standard utilities (od, bc, /dev/urandom); ensure these are present if you want full functionality; 3) SKILL.md lists web_search as an allowed tool but the script doesn't use it—if you are concerned about autonomous agent web access, consider disabling autonomous invocation or reviewing agent tool permissions. Overall the footprint is limited, but always run third‑party scripts in a controlled environment if you are unsure.Like a lobster shell, security has layers — review code before you run it.
latestvk978xfpx5aeej00yqff23y2yw183pp8r
License
MIT-0
Free to use, modify, and redistribute. No attribution required.