中文 EN

扫描报告

扫描新文件

✓ 低风险 — 风险评分 10/100
上次扫描：2 天前 重新扫描
10 /100
ziwei-skill
紫微斗数排盘技能 - Chinese astrology (Ziwei Doushu) fortune calculation skill
Legitimate Chinese astrology (Ziwei Doushu) calculation skill with no malicious functionality detected; minor documentation inconsistency exists.
技能名称ziwei-skill
分析耗时22.1s
引擎pi
✓
可以安装
No action required. The skill is safe to use for its stated purpose of fortune calculation.

安全发现 1 项

严重性 安全发现 位置
低危
Documentation references non-existent Python script
SKILL.md usage example references 'python3 scripts/ziwei_pan.py' but no such file exists in the skill package. The implementation is entirely in index.js (JavaScript).
python3 scripts/ziwei_pan.py --date "1990-05-15" --hour 8
→ Update SKILL.md to reflect JavaScript usage or remove the Python script reference
 SKILL.md:28
资源类型声明权限推断权限状态证据
文件系统 NONE NONE — No file system operations in index.js
网络访问 NONE NONE — No network requests found in code
命令执行 NONE NONE — No subprocess or shell execution found
环境变量 NONE NONE — No os.environ or process.env access for sensitive data
剪贴板 NONE NONE — No clipboard access
浏览器 NONE NONE — No browser automation
数据库 NONE NONE — No database operations

目录结构

2 文件 · 7.7 KB · 237 行
JavaScript 1f · 207L Markdown 1f · 30L
├─ 📜 index.js JavaScript 207L · 6.9 KB
└─ 📝 SKILL.md Markdown 30L · 818 B

安全亮点

✓ No network requests or external communications
✓ No credential harvesting or environment variable access
✓ No shell execution or subprocess calls
✓ No file system manipulation
✓ No obfuscated code or suspicious patterns (eval, atob, base64)
✓ No sensitive path access (~/.ssh, ~/.aws, .env)
✓ Pure calculation/algorithm implementation
✓ No data exfiltration mechanisms