中文 EN

Scan Report

Scan New Files

✓ Low Risk — Risk Score 10/100
Last scan:2 days ago Rescan
10 /100
ziwei-skill
紫微斗数排盘技能 - Chinese astrology (Ziwei Doushu) fortune calculation skill
Legitimate Chinese astrology (Ziwei Doushu) calculation skill with no malicious functionality detected; minor documentation inconsistency exists.
Skill Nameziwei-skill
Duration22.1s
Enginepi
✓
Safe to install
No action required. The skill is safe to use for its stated purpose of fortune calculation.

Findings 1 items

Severity Finding Location
Low
Documentation references non-existent Python script
SKILL.md usage example references 'python3 scripts/ziwei_pan.py' but no such file exists in the skill package. The implementation is entirely in index.js (JavaScript).
python3 scripts/ziwei_pan.py --date "1990-05-15" --hour 8
→ Update SKILL.md to reflect JavaScript usage or remove the Python script reference
 SKILL.md:28
ResourceDeclaredInferredStatusEvidence
Filesystem NONE NONE — No file system operations in index.js
Network NONE NONE — No network requests found in code
Shell NONE NONE — No subprocess or shell execution found
Environment NONE NONE — No os.environ or process.env access for sensitive data
Clipboard NONE NONE — No clipboard access
Browser NONE NONE — No browser automation
Database NONE NONE — No database operations

File Tree

2 files · 7.7 KB · 237 lines
JavaScript 1f · 207L Markdown 1f · 30L
├─ 📜 index.js JavaScript 207L · 6.9 KB
└─ 📝 SKILL.md Markdown 30L · 818 B

Security Positives

✓ No network requests or external communications
✓ No credential harvesting or environment variable access
✓ No shell execution or subprocess calls
✓ No file system manipulation
✓ No obfuscated code or suspicious patterns (eval, atob, base64)
✓ No sensitive path access (~/.ssh, ~/.aws, .env)
✓ Pure calculation/algorithm implementation
✓ No data exfiltration mechanisms