安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears to be what it claims: a local Node.js Bazi calculator that depends on the npm package shunshi-bazi-core. Before installing or running: (1) Inspect the shunshi-bazi-core package (npm page / repository) for its source, published version, and any install scripts (postinstall) — malicious packages can execute code during npm install. (2) Run npm install in an isolated environment (container or sandbox) if you cannot verify the dependency. (3) The calc.mjs script itself only prints...详细分析 ▾
✓ 用途与能力
Name/description match the actual behavior: the skill runs a local Node.js calculator (scripts/calc.mjs) and depends on the shunshi-bazi-core package. No unrelated binaries, credentials, or config paths are requested.
✓ 指令范围
SKILL.md confines runtime actions to collecting birth info from the user and running the provided calc.mjs script. It does not instruct the agent to read arbitrary files, access environment secrets, or transmit results to external endpoints. The only possible outward action is using 'world knowledge' to find lat/lon for city names — that is a behavioral guideline, not an instruction to call a specific external API.
ℹ 安装机制
There is no platform install spec in the registry, but SKILL.md instructs running 'npm install' which will fetch shunshi-bazi-core from the npm registry. This is expected for a Node-based skill, but installing third‑party npm packages can run lifecycle scripts (pre/postinstall) and execute code locally — review the dependency before install or run in an isolated environment.
✓ 凭证需求
The skill requests no environment variables, credentials, or config paths. The provided calc.mjs only consumes CLI args and does not read environment secrets.
✓ 持久化与权限
The skill is not always-enabled and does not request persistent/system privileges. It does not modify other skills or global agent settings; running npm will create node_modules in the skill directory (normal for Node projects).
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/12
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install shunshi-bazi-analysis
镜像加速npx clawhub@latest install shunshi-bazi-analysis --registry https://cn.longxiaskill.com