Daily Astro

西方星座每日运势 — 12星座今日运程、幸运元素、爱情事业财运指数，中英双语精美卡片。Daily Western horoscope for all 12 zodiac signs — love career finance scores, lucky elements, bilingual EN/CN. Tri...

Security Scan

The skill's code, instructions, and requirements are consistent with a horoscope push/notification skill — it reads/writes local user settings, emits scheduling markers for the hosting platform, and prints prompts for generating horoscope text; it does not request credentials or access unrelated system resources.

Purpose & Capability

Name/description (daily horoscope + push) align with the included scripts: morning/evening push generators and a push-toggle script. The code supports scheduling pushes to channels and persisting per-user settings under data/users, which is expected for this functionality.

Instruction Scope

SKILL.md and the scripts limit actions to printing generation prompts and managing per-user JSON files. There are no instructions to read arbitrary system files, environment secrets, or to send data to external HTTP endpoints from within the skill.

Install Mechanism

There is no install spec (instruction-only install) and all code is included in the package. Nothing is downloaded or extracted at install time.

Credentials

The skill requires no environment variables or external credentials. It only reads/writes JSON files in a local data/users directory, which is proportionate to storing push preferences.

Persistence & Privilege

always:false (good). The skill emits __OPENCLAW_CRON_ADD__/__OPENCLAW_CRON_RM__ markers to register scheduled runs with the platform; that is expected for a push-scheduling skill but does grant the platform permission to invoke the skill's scripts on schedule. The skill does not modify other skills or request broader system privileges.

Assessment

This skill appears to do what it says: generate bilingual horoscope text and manage scheduled pushes. Before installing, consider: (1) it will create and update per-user JSON files under the skill's data/users directory; (2) enabling push will register scheduled jobs with the hosting platform (the platform will autonomously run the scripts at the scheduled times); (3) this skill does not request any API keys or access external endpoints itself — you should verify that your platform's channel integrations (telegram/feishu/slack/discord) are configured safely and that you trust the platform to run scheduled jobs. If you want to review behavior further, inspect data/users contents and the platform's handling of __OPENCLAW_CRON_ADD__ entries.

西方星座运势

西方星座运势 — 12星座每日运程 · 爱情事业财运 · 幸运元素 · 中英双语

何时使用

• 用户说"今日星座""我的星座运势""白羊座今天怎么样"
• 用户想查爱情运/事业运/财运
• 用户说"horoscope""zodiac""星座配对"
• 用户说"今天适合表白吗""今天适合谈合同吗"

---

推送管理

node scripts/push-toggle.js on <userId>
node scripts/push-toggle.js on <userId> --morning 08:00 --evening 21:00 --channel feishu
node scripts/push-toggle.js off <userId>
node scripts/push-toggle.js status <userId>

支持渠道：telegram / feishu / slack / discord