Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

风水堪舆技能

v2.0.0

风水堪舆技能。支持八宅风水排盘、东四宅/西四宅判断、游年九星排布、方位吉凶分析,提供基础布局建议。

1· 170·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for dglijin-oss/fengshui-skill.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "风水堪舆技能" (dglijin-oss/fengshui-skill) from ClawHub.
Skill page: https://clawhub.ai/dglijin-oss/fengshui-skill
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install fengshui-skill

ClawHub CLI

Package manager switcher

npx clawhub@latest install fengshui-skill
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill claims to provide Feng Shui analyses and the included index.js contains functions (命卦计算、九星排布、布局建议等) that implement that functionality — that part is coherent. However, SKILL.md usage examples instruct running python3 scripts/fengshui_pan.py, but no such Python script or scripts/ directory exists in the package. That discrepancy (JS implementation vs. Python usage instructions) is unexpected and unexplained.
!
Instruction Scope
SKILL.md gives a narrow, scoped runtime instruction (run a local Python script with --year and --direction). The problem: those instructions reference a file that does not exist in the bundle, so an agent following the SKILL.md would fail or try to compensate (e.g., search for/attempt to download the missing script). The instructions themselves do not ask for secret/env access or unrelated file reads, but the mismatch grants the agent broad discretion to resolve the missing artifact — a potential vector for unsafe behavior.
Install Mechanism
There is no install specification and no remote downloads. The skill is instruction-only plus a local index.js code file; nothing in the manifest indicates automatic fetching of external code or packages.
Credentials
The skill declares no required environment variables, no credentials, and no config paths. The included JavaScript code performs pure computations and contains no network calls, credentials usage, or references to external services.
Persistence & Privilege
The skill does not request always:true and has default invocation settings. There is no indication it modifies other skills or system-wide configuration.
What to consider before installing
This package appears to implement the advertised Feng Shui calculations (in index.js) but the runtime instructions point to a missing Python script (scripts/fengshui_pan.py). Before installing or enabling: 1) ask the publisher for the correct runtime instructions or for the missing Python script; 2) inspect index.js yourself (it looks like local, pure computation code with no network calls) and confirm your platform will execute JS code rather than the referenced Python script; 3) run the skill first in an isolated/sandboxed environment; 4) avoid granting any credentials or extra permissions until provenance and the execution path are clarified. The mismatch is likely an oversight but could cause an agent to try to fetch or execute unexpected code — treat as suspicious until resolved.

Like a lobster shell, security has layers — review code before you run it.

latestvk97d1qchxm5dc47e5zy5tgqt2x844qkq
170downloads
1stars
2versions
Updated 3w ago
v2.0.0
MIT-0

风水堪舆技能 v2.0.0

"风水者,藏风得水也。"

功能

  • ✅ 八宅分类(东四宅/西四宅)
  • ✅ 命卦计算(出生年份推算)
  • ✅ 游年九星排布(伏位/生气/天医等)
  • ✅ 方位吉凶分析
  • ✅ 布局建议(门窗/卧室/厨房/卫生间)
  • ✅ 煞气识别与化解

使用

python3 scripts/fengshui_pan.py --year 1990
python3 scripts/fengshui_pan.py --year 1990 --direction "坐北朝南"

变更

v2.0.0: 游年九星、布局建议、煞气化解

Comments

Loading comments...