ClawHub

I Ching Fortune Telling 易经算命

v1.0.0

Complete fortune-telling service with interactive divination sessions. Supports Chinese methods (I Ching, Ba Zi, Zi Wei, Palmistry, Face Reading, Feng Shui,...

⭐ 1· 203·1 current·1 all-time
byYong Wu@yw-0311
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description (I Ching and other divination methods) matches the instructions and required inputs: birth data for Ba Zi/Zi Wei/astrology and photos for palmistry/face reading. There are no unrelated environment variables, binaries, or install steps.
ℹ
Instruction Scope
Runtime instructions stay within the declared domain (coin toss RNG for I Ching, calculating Four Pillars for Ba Zi, photo-based palm/face reading). The SKILL.md explicitly tells the agent not to use unrelated user background (resumes, employment history), which reduces scope creep. It does instruct generation of HTML reports that reference external assets (Google Fonts URL), which could cause network fetches when reports are rendered.
✓
Install Mechanism
No install spec and no code files — the skill is instruction-only, so nothing is written to disk and no external packages or downloads are performed by the skill itself.
ℹ
Credentials
The skill requests no credentials or environment variables (proportionate). However, it expects sensitive personal inputs from users (biometric images for palm/face reading and exact birth time/place for Ba Zi/astrology). Those inputs are consistent with the stated features but carry privacy risk and should be handled carefully.
✓
Persistence & Privilege
The skill is not always-enabled and does not request special agent privileges. Nothing in the files indicates the skill attempts to modify other skills or agent-wide settings.
Scan Findings in Context
[no_regex_matches] expected: The static regex-based scanner found nothing because this is an instruction-only skill with no code files to analyze. That absence of findings is expected but not evidence of safety.
Assessment
This skill appears to do what it says and doesn't request credentials or install code, but it asks users for personal data (exact birth time/place and photos of palms/faces). Before using: (1) avoid uploading sensitive identifying documents (IDs, full-face photos you don't want stored); consider blurring or providing descriptive alternatives; (2) confirm where uploaded images and generated HTML reports will be stored or sent and whether they will be retained; (3) be cautious about providing precise birth times/locations if you consider that sensitive; (4) note the skill’s source/homepage is unknown — if provenance matters, prefer skills with clear authorship and a homepage. If you decide to proceed, limit shared personal data to the minimum required for the chosen method.

Like a lobster shell, security has layers — review code before you run it.

latestvk975smbqkhvqkgsx2xn38ncets83a2r7

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments