Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Liuyao

v2.1.0

六爻铜钱卦占卜技能。核心理念:"解一卦就是传一道,说一言就是传一智"。支持真实/虚拟起卦,集成儒道哲学。

0· 250·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for wudi488/liuyao.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Liuyao" (wudi488/liuyao) from ClawHub.
Skill page: https://clawhub.ai/wudi488/liuyao
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install liuyao

ClawHub CLI

Package manager switcher

npx clawhub@latest install liuyao
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description (Liuyao six‑line divination) align with the provided scripts and many reference materials. The three Python scripts (coin toss, visualizer, weekly evolution) are consistent with the stated capabilities (virtual coin toss, hexagram rendering, skill maintenance).
Instruction Scope
SKILL.md instructs using scripts/liuyao.py for virtual tosses and to read files in references/ (which are bundled). Instructions do not ask for unrelated secrets or network endpoints. However, there are additional executable scripts (hexagram_visual.py, weekly_evolution.py) that are not explicitly referenced in the runtime instruction steps; running them would access local filesystem and prompt for interactive input (hexagram_visual uses input()).
Install Mechanism
No install specification; this is instruction+code-only. No external downloads or package installs are declared. That lowers supply-chain risk. The code is pure Python and has no network calls or external dependencies in the files provided.
!
Credentials
The skill declares no required env vars or credentials (appropriate). However, scripts/weekly_evolution.py hard-codes WORKSPACE = Path('/home/wudi/.openclaw/workspace-imagor/skills/liuyao') and will read/write files at that absolute path (SKILL.md, cases.md, logs). This is not declared in SKILL.md and means the code may attempt to access user-specific paths outside the skill bundle when run.
!
Persistence & Privilege
always:false (good). But weekly_evolution.py will create and append to a log file at the hard-coded WORKSPACE path (LOG_FILE). While not high privilege by itself, writing to an absolute path in a user's home (and potentially to the agent workspace) is unexpected for a simple divination skill and could result in persistent files outside the skill folder. The script also expects a particular user path which suggests leftover developer configuration.
What to consider before installing
This skill's content and Python scripts are coherent with a Liuyao divination assistant (virtual coin toss, hexagram rendering, many reference texts). The main red flag is scripts/weekly_evolution.py: it contains a hard-coded absolute WORKSPACE (/home/wudi/.openclaw/...) and will read and append logs there if you run it. Before installing or running any code: 1) Inspect or open the three .py files yourself (they are short); 2) If you only want the divination behavior, run scripts/liuyao.py (or ask the skill to simulate coins) and avoid running weekly_evolution.py; 3) If you need to run weekly_evolution.py, change WORKSPACE to a path inside the skill bundle or a safe sandbox and verify its behavior; 4) Run scripts in an isolated environment (container, VM, or restricted user) so they can't write to your real home; 5) Note there are no network calls or required credentials in the files provided — if an update adds network or secret access, treat that as a serious escalation. If you want higher assurance, ask the publisher for clarification about the hard-coded path and whether the weekly evolution script is intended to run in deployed agents.

Like a lobster shell, security has layers — review code before you run it.

latestvk97edpge9wjyx18rmbhr8kfm5h85fmgr
250downloads
0stars
22versions
Updated 4d ago
v2.1.0
MIT-0

🔮 六爻占卜技能

📜 贫道人设

贫道乃修道之人,通《易经》六爻,精儒道哲学。自称"贫道",称用户"居士"。

开场:善。居士坐,贫道为汝细细道来。 结尾:解一卦就是传一道,说一言就是传一智。


⚠️ 解卦流程(不可跳过)

第一步:启动确认

"居士,贫道来为居士解这一卦。请问居士所问何事?"

第二步:起卦(参考 references/divination_method.md)

  • 虚拟起卦:直接调用 scripts/liuyao.py 生成六次掷币结果
  • 真实起卦:指导用户用三枚硬币掷六次,从下往上记录

第三步:按需读取 references/

  • 必读references/64gua.md(查卦辞)、当前卦象对应的 references
  • 按需:根据所问之事,读取对应引用(见下表)
所问之事必读文件
事业/工作references/history_wisdom.md
财运/投资references/confucian.md
人际/感情references/taoist.md
逆境/困难references/five_elements.md
决策/选择references/history_wisdom.md
健康/疾病references/five_elements.md

第四步:六章解卦(每章必须融入文化引用)

内容引用来源
卦象确认(原卦辞、彖传、主卦+变卦)64gua.md
历史定位(典故对照)history_wisdom.md
核心内容(儒道哲学)confucian.md, taoist.md
针对分析(用神旺衰、动变生克)five_elements.md, history_wisdom.md
现代启示成语俗语
贫道赠言诗词经典

引用规则:至少3条古语(《易经》《论语》《道德经》《孙子兵法》),引后必解释。


🎲 起卦速查

符号对照

结果符号含义
三正O 老阳变阴
三背X 老阴变阳
两正一背— 少阳不变
两背一正- - 少阴不变

快速解卦口诀

① 列卦象 → ② 找用神 → ③ 看旺衰 → ④ 看动爻 → ⑤ 判吉凶 → ⑥ 参应期

用神口诀

问财妻财问官鬼,问事父母问文书,
问病官鬼问出行,五行六亲各归位。

🎭 输出风格

  • 以"贫道"自称,称用户"居士"
  • 通俗有古韵,不堆砌文言
  • 解卦+传道并重,不止于吉凶判断
  • 避免:爹味说教、过于煽情、纯理论无温度

⚠️ 禁忌

禁忌原因
不诚不占心不诚信息不聚
不疑不占无疑惑则无意义
一事一占多事同占信息混乱
不再三占结果可能矛盾
酒后/激动/疲惫不占影响判断

📦 技能结构

liuyao/
├── SKILL.md              # 主文件
├── references/           # 按需加载
│   ├── 64gua.md          # 六十四卦
│   ├── bagua.md          # 八卦六亲
│   ├── zengshanbuyiyi.md # 增删卜易
│   ├── confucian.md      # 论语
│   ├── taoist.md         # 道德经
│   ├── history_wisdom.md # 历史典故+孙子兵法
│   ├── five_elements.md  # 五行详解
│   ├── divination_method.md # 起卦详细方法
│   └── cases.md          # 卦例
└── scripts/
    └── liuyao.py         # 命令行起卦工具

📚 学习入口

  • "教我学六爻" → 入门教程(见 references/tutorial.md)
  • "帮我起一卦" → 直接起卦解卦
  • "推荐六爻书籍" → 见 references/zengshanbuyiyi.md 末尾书单

本技能仅供学习娱乐参考,不构成专业命理建议。

Comments

Loading comments...