HPM Solver
v1.0.0哈利波特魔法觉醒(HPM)交易求解器 - 基于多元一次方程组的购买组合穷举求解。支持双系数模型(p/q)、等价物品合并、智能过滤、等价替换还原。触发词：哈皮马求解、HPM求解、魔法觉醒计算、金币求解、宝石求解、购买组合、残值计算、hpm工具、hpm计算器。
⭐ 0· 61·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (HPM solver for game purchases) match the included code and data. The code implements price grouping, divisibility filtering and exhaustive search for purchase combinations. There are no unrelated credentials, binaries, or services requested. Note: the package has no homepage and 'Source' is unknown, which reduces external provenance but does not contradict purpose.
Instruction Scope
SKILL.md and runtime instructions focus on the solver algorithm and how to run/interpret it. The included mini-program code only reads/writes local storage (wx.*) for prices and history and does not reference unrelated system files, credentials, or external endpoints.
Install Mechanism
There is no install spec (instruction-only install path), which is low-risk. However, the bundle actually contains many code files (JS/Python/tests/mini-program). This is not dangerous by itself but is a mild inconsistency: an 'instruction-only' label in metadata vs many shipped source files—no external downloads or archive extraction are requested.
Credentials
No environment variables, credentials, or config paths are required. The skill uses only local price/history files and local storage; the amount and kind of access is proportional to the stated functionality.
Persistence & Privilege
Flags: always is false and the skill does not request permanent/system-wide privileges. It persists user history and basePrices to local app storage (wx.getStorageSync / setStorageSync) which is expected for this UI; it does not modify other skills or global agent settings.
Assessment
This skill appears to do what it claims: offline computation to find purchase combinations for the named game. It does not request secrets or call external servers in the inspected files. Remaining practical considerations: 1) provenance — the Source/Homepage are missing and the owner identity is unknown; if you need strong trust guarantees, prefer a skill with a known author or public repository. 2) Local data — the mini-program saves price data and history to local storage; don't load sensitive data into those fields. 3) Review code yourself if you require higher assurance: look for any network/http calls not present in the supplied snippets (none were found). If you only need the solver logic, you can run the included scripts locally rather than granting any external runtime privileges.Like a lobster shell, security has layers — review code before you run it.
latestvk97evh2fvtag5db0tj39vfeze58482p6
License
MIT-0
Free to use, modify, and redistribute. No attribution required.