中文 EN

Scan Report

Scan New Files

✓ Trusted — Risk Score 10/100
Last scan:2 days ago Rescan
10 /100
ze-ri-skill
择日学技能。支持查询吉日凶日、建除十二神、黄道黑道、神煞吉凶，提供婚嫁、开业、动土、出行等择日建议。
A legitimate Chinese calendar auspicious date selection skill with pure algorithmic implementation and no security concerns.
Skill Nameze-ri-skill
Duration22.7s
Enginepi
✓
Safe to install
No action needed. The skill is safe to use.

Findings 1 items

Severity Finding Location
Info
Documentation references non-existent Python script
SKILL.md shows usage examples with 'python3 scripts/ze_ri.py' but the implementation is in index.js (JavaScript). This is a documentation inconsistency with no security impact.
python3 scripts/ze_ri.py --date "2026-04-15"
→ Update SKILL.md to reference the JavaScript implementation or add a scripts/ze_ri.py wrapper if Python is desired.
 SKILL.md:15
ResourceDeclaredInferredStatusEvidence
Filesystem NONE NONE — No file operations in code
Network NONE NONE — No network requests in code
Shell NONE NONE — No shell execution in code
Environment NONE NONE — No env access in code
Skill Invoke NONE NONE — No skill invocation in code
Clipboard NONE NONE — No clipboard access in code
Browser NONE NONE — No browser access in code
Database NONE NONE — No database access in code

File Tree

2 files · 7.9 KB · 273 lines
JavaScript 1f · 242L Markdown 1f · 31L
├─ 📜 index.js JavaScript 242L · 7.1 KB
└─ 📝 SKILL.md Markdown 31L · 735 B

Security Positives

✓ No shell execution or subprocess calls
✓ No network requests or external IP communications
✓ No credential harvesting or environment variable access
✓ No sensitive file system access (~/.ssh, ~/.aws, .env)
✓ No base64 encoding/decoding or eval() usage
✓ Pure algorithmic implementation for Chinese calendar calculations
✓ No remote script execution (curl|bash, wget|sh)
✓ No data exfiltration mechanisms