黄历 · 农历查询

黄历查询：输入公历日期，查询当日黄历宜忌、吉凶、神煞、冲煞等信息，支持搬家吉日、结婚吉日、开业吉日、开工吉日择日。 黄历 · 中国农历黄历吉凶 · Zhongguo Nongli Huangli Jixiong · China Lunar Almanac Unified Huangli skill for com...

Security Scan

The skill is internally consistent with a China lunar-almanac service: it requires a service token and calls api.nongli.skill.4glz.com; the only notable issue is a metadata mismatch about required environment variables in the registry listing.

Purpose & Capability

The code and SKILL.md implement a lunar-almanac client (single-date, batch, keyword search) and require a HUANGLI_TOKEN and optional HUANGLI_BASE — both are appropriate for the stated purpose. However, registry metadata at the top of the submission incorrectly lists 'Required env vars: none' while SKILL.md and toolkit.py clearly require HUANGLI_TOKEN; this discrepancy reduces trust in the metadata but does not indicate malicious behavior.

Instruction Scope

Runtime instructions and toolkit.py are narrowly scoped: they convert date inputs to YYYY-MM-DD, call the provider's API endpoints (/api/lunar/date and /api/lunar/batch) using a bearer token, and print JSON results. The instructions do not read unrelated files, system configuration, or other environment variables.

Install Mechanism

There is no install spec (instruction-only) and included code is pure Python/bash that is shown in the package. No remote downloads or archive extraction are used. Risk from install mechanism is low.

Credentials

The only required secret is a HUANGLI_TOKEN Bearer token (and an optional HUANGLI_BASE URL). That is proportionate to calling a hosted API. The package metadata inconsistency (registry claiming no required env vars) is the only concern to verify before trusting the token request.

Persistence & Privilege

The skill does not request persistent or elevated privileges. always:false (default), no config paths, and it does not modify other skills or system settings. The skill can be invoked autonomously by the agent (disable-model-invocation is false) which is the platform default and expected for skills.

Assessment

This skill appears to do exactly what it says: query a lunar-almanac API and return results. Before installing, verify the following: 1) The registry metadata incorrectly says no env vars are required, but the code and SKILL.md require HUANGLI_TOKEN — do not supply any token you wouldn’t want the service to use. 2) Confirm the API domain (api.nongli.skill.4glz.com) and the homepage (https://nongli.skill.4glz.com) are legitimate and you trust the service. 3) Use a minimal-scope token (or a token you can rotate/delete) rather than reusing other credentials. 4) Review the included toolkit.py (provided) yourself — it shows exactly what will be sent (dates) and that no other local data is read. If you cannot verify the provider or want to limit risk, do not provide your token and instead query the service manually via its website.

中国农历黄历吉凶 · Zhongguo Nongli Huangli Jixiong · China Lunar Almanac (Auspicious & Inauspicious)

官网与 Token

• 官网（注册/登录）：https://nongli.skill.4glz.com
• 控制台（获取 Token）：https://nongli.skill.4glz.com/dashboard
• API Base：https://api.nongli.skill.4glz.com

先配置环境变量：

export HUANGLI_TOKEN="your_token_here"
export HUANGLI_BASE="https://api.nongli.skill.4glz.com"

用法（统一入口）

# 1) 单日查询
python3 toolkit.py by-date 2027-08-08

# 2) 区间批量查询（支持筛选）
python3 toolkit.py batch 2027-08-01 2027-08-31 --filter 搬家

# 3) 关键词搜索
python3 toolkit.py search 甲子日 --year 2027

何时用哪种模式

• by-date：只问一个具体日期
• batch：比较多天、整周、整月
• search：关键词跨日期范围检索（甲子日/摩羯座/初一/搬家等）

关键实践

• 自然语言时间先展开为具体日期（YYYY-MM-DD）
• 多日期请求优先 POST /api/lunar/batch
• 关键词检索基于返回数据本地筛选（无服务端关键词搜索接口）

配额说明

1、默认免费额度：10 个唯一日期/天 2、超额返回429，并提醒手动重置，用户登陆控制台进行手动重置。 3、不限制重置次数。