Ziwei Doushu

• Analyzed: May 12, 2026, 4:33 AM
• Findings: 1
• Version: 1.0.2
• Hash: 6ea396225db3cb7d993d9ab045d0eeeac4ce248e702f0b4a973d373a20f1d41c
• Source: palm
• External report: View on VirusTotal

Findings (1)

The ziwei-doushu skill bundle is a legitimate tool for generating traditional Chinese astrology reports. The code in scripts/ziwei_chart.py and scripts/ziwei_engine_js.mjs implements complex calculation logic using the 'iztro' library, featuring robust input validation (e.g., date/time parsing, gender normalization) and safe SVG generation with proper XML escaping. While the Python script contains a minor bug (a missing 'subprocess' import required for the optional JS engine fallback), there is no evidence of malicious intent, data exfiltration, or prompt injection. The bundle adheres to its stated 'offline only' scope and lacks any suspicious network or file system activity.