by 安全扫描
OpenClaw
安全
medium confidenceNULL
评估建议
This skill appears coherent and lightweight: it asks for no secrets or installs and its instructions align with providing daily guidance. Two things to note before installing: (1) The SKILL.md is vague about where to fetch 'real' calendar and local weather data — the agent may call external APIs or use location information to do so, which can transmit your location/date context. If you care about privacy, either restrict the agent's network/tools or provide the weather/calendar data yourself. (2...详细分析 ▾
✓ 用途与能力
Name/description ask for daily advice combining solar-term and weather data; SKILL.md matches that purpose and does not request unrelated credentials, binaries, or config paths. The package.json metadata (homepage, price) is consistent with a published content skill.
ℹ 指令范围
SKILL.md requires combining '今日真实历法/节气数据' and '本地天气数据' but does not specify sources or exact steps. This leaves broad discretion to the agent to fetch data (e.g., call web APIs or local tools). The instructions do not direct reading unrelated files or secret env vars and explicitly forbid superstition-related outputs.
✓ 安装机制
No install spec and no code files beyond package.json and SKILL.md — instruction-only skill with minimal disk footprint and low install risk.
✓ 凭证需求
The skill declares no required environment variables, credentials, or config paths. The guidance to use weather/calendar data is appropriate for its purpose and does not demand unrelated secrets.
✓ 持久化与权限
always:false and user-invocable:true (defaults) — standard behavior. The skill does not request persistent system privileges or modification of other skills' configs.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv2.1.02026/3/19
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install mountain-daoist-guide
镜像加速npx clawhub@latest install mountain-daoist-guide --registry https://cn.longxiaskill.com镜像同步中