胡来给你算一卦

• Verdict: Pass
• Analyzed: May 13, 2026, 2:41 AM
• Findings: 0
• Version: 1.0.0
• Hash: c95db7ae4a3f823525980ee86e4823c68b9770749475288487a1bd97063bac2b
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: hulai-diviation Version: 1.0.0 The skill is a harmless entertainment tool designed for fortune-telling and 'divination' based on user queries. It consists of standard metadata, formatting instructions in SKILL.md, and a static data file (references/fortunes.json) containing humorous text responses; no malicious code, data exfiltration, or suspicious execution patterns were identified.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI04: Agentic Supply Chain Vulnerabilities

NoteHigh Confidence

What this means

This does not show unsafe behavior, but it may make it harder to confirm exactly which release is being reviewed or installed.

Why it was flagged

The registry metadata supplied for review lists Version 1.0.0, while the packaged _skillhub_meta.json lists version 1.0.2, creating a minor package/version consistency gap.

Skill content

"version": "1.0.2"

Recommendation

If exact version provenance matters, verify the listing and package metadata match before relying on the skill.