Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed Chinese divination reference skill with normal installation instructions and no evidence of hidden code execution, exfiltration, or unsafe persistence.
Install only if you want a Chinese-language 小六壬 divination helper. Treat its health, finance, legal, and life guidance as cultural or entertainment-oriented interpretation, not as a basis for important decisions.
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
git clone https://github.com/tianmingwangluo/xiaoliuren-skill.git
mkdir -p ~/.dsh/skills/xiaoliuren-skill
cp xiaoliuren-skill/SKILL.md xiaoliuren-skill/examples.md ~/.dsh/skills/xiaoliuren-skill/
L053 将自动调用条件描述为“直接描述占卜需求”，并给出自然日常措辞示例，但没有限定明确触发短语、上下文边界或排除条件。这种表述对 markdown 技能说明而言过于宽泛，可能让代理在普通聊天中因提到运势或求助而误触发该技能。
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
git clone https://github.com/tianmingwangluo/xiaoliuren-skill.git
mkdir -p "${HERMES_HOME:-~/.hermes}/skills/xiaoliuren-divination"
cp xiaoliuren-skill/SKILL.md xiaoliuren-skill/examples.md "${HERMES_HOME:-~/.hermes}/skills/xiaoliuren-divination/"
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
也可从 GitHub 直接安装（会经过 Hermes 安全扫描；仅下载 SKILL.md，不含 examples.md）：
hermes skills install https://raw.githubusercontent.com/tianmingwangluo/xiaoliuren-skill/main/SKILL.md
安装后：
L086 说明“描述占卜需求”即可自动加载技能，但未定义何为占卜需求、是否需要特定术语、以及哪些相似表达不应触发。对于技能调用说明，这属于激活条件不清晰，可能造成意外匹配。
L094 写明“在用户请求小六壬占卜时会自动调用”，但没有定义请求格式、关键词范围、或代理侧限制条件。该类面向多代理的泛化说明缺少具体触发范围，容易造成实现者采用过宽匹配。
The instruction '以口语化中文' requires responses in Chinese as part of the skill's output behavior. This is a natural-language locale policy constraint, and the file does not indicate that the user can opt into another language or choose their preferred locale.
README 全文以中文编写，并面向多种国际化 AI 代理使用场景，但未说明是否支持其他语言或允许用户选择输出语言。按照语言/地区策略，若技能默认强制单一语言且无用户选择，可能构成自然语言层面的语言政策问题。
This markdown file presents all instructions and examples exclusively in Chinese, and it does not indicate that the user can choose another language or that the skill is intentionally limited to a Chinese-speaking audience. Under the policy rule, forcing a specific language without user opt-in is a natural-language policy concern.
No suspicious patterns detected.