Scan Report
0 /100
qimen-pan-skill
奇门遁甲排盘技能。支持阴阳遁、局数、八门九星八神落宫、断卦解盘自动化分析。
This is a legitimate traditional Chinese divination (奇门遁甲) tool with pure computational code and no malicious behavior detected.
Safe to install
This skill is safe to use. No security concerns identified.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | NONE | NONE | — | No filesystem access in any script |
| Network | NONE | NONE | — | No network requests in any script |
| Shell | NONE | NONE | — | No subprocess or shell execution in Python scripts; backup.sh is local-only |
| Environment | NONE | NONE | — | No access to os.environ or sensitive environment variables |
| Skill Invoke | NONE | NONE | — | No skill_invoke calls |
| Clipboard | NONE | NONE | — | No clipboard access |
| Browser | NONE | NONE | — | No browser interaction |
| Database | NONE | NONE | — | No database access |
4 findings
Medium External URL 外部 URL
https://img.shields.io/badge/version-2.0.1-blue.svg README.md:5 Medium External URL 外部 URL
https://img.shields.io/badge/python-3.8+-green.svg README.md:6 Medium External URL 外部 URL
https://python.org README.md:6 Medium External URL 外部 URL
https://img.shields.io/badge/license-MIT-orange.svg README.md:7 File Tree
7 files · 79.0 KB · 2353 lines Python 2f · 1592L
Markdown 4f · 691L
Shell 1f · 70L
├─
▾
references
│ └─
奇门基础知识.md
Markdown
├─
▾
scripts
│ ├─
backup.sh
Shell
│ ├─
qimen_pan_v2.py
Python
│ └─
qimen_pan.py
Python
├─
CHANGELOG.md
Markdown
├─
README.md
Markdown
└─
SKILL.md
Markdown
Security Positives
✓ Pure Python implementation with no external dependencies
✓ No network requests, no credential access, no data exfiltration
✓ No shell execution (subprocess, os.system, or shell scripts executed by Python)
✓ backup.sh is a local-only file backup utility with no remote reach
✓ Code is well-structured astronomical/calendar computation: lunar calendar conversion, solar term calculation, true solar time correction, and divination logic
✓ SKILL.md accurately describes all functionality
✓ No base64, eval, curl|bash, pip install, or other high-risk patterns
✓ No access to sensitive paths (~/.ssh, ~/.aws, .env)
✓ No hidden functionality or steganographic payloads