中文 EN

Scan Report

Scan New Files

✓ Trusted — Risk Score 0/100
Last scan:2 days ago Rescan
0 /100
liuren-skill
大六壬排盘与断卦技能 - Ancient Chinese divination skill for fortune-telling
This is a legitimate Chinese metaphysics (大六壬) divination skill with purely mathematical/algorithmic JavaScript code. No shell execution, network access, filesystem writes, credential harvesting, or any malicious behavior detected.
Skill Nameliuren-skill
Duration21.9s
Enginepi
✓
Safe to install
No action needed. The skill is safe to use as declared.

Findings 1 items

Severity Finding Location
Info
Documentation Minor Mismatch
SKILL.md examples show Python script usage (liuren_pan.py), but the actual implementation is JavaScript (index.js). This is a documentation inconsistency but not a security issue.
python3 ~/.openclaw/skills/liuren-skill/scripts/liuren_pan.py
→ Update SKILL.md to reflect the actual JavaScript implementation, or add the referenced Python script.
 SKILL.md:63
ResourceDeclaredInferredStatusEvidence
Filesystem NONE NONE — No filesystem access in code
Network NONE NONE — No network calls in code
Shell NONE NONE — No subprocess/exec calls in code
Environment NONE NONE — No env iteration in code
Skill Invoke NONE NONE — No cross-skill invocation
Clipboard NONE NONE — No clipboard access
Browser NONE NONE — No browser access
Database NONE NONE — No database access

File Tree

2 files · 16.1 KB · 629 lines
Markdown 1f · 368L JavaScript 1f · 261L
├─ 📜 index.js JavaScript 261L · 7.0 KB
└─ 📝 SKILL.md Markdown 368L · 9.1 KB

Security Positives

✓ No shell execution (no child_process, exec, spawn)
✓ No network access (no fetch, http, axios)
✓ No filesystem writes or sensitive path access
✓ No credential harvesting or environment variable iteration
✓ No obfuscated code, eval, or base64 payloads
✓ No external dependencies or suspicious imports
✓ Code is readable and well-structured with clear mathematical algorithms
✓ No hidden functionality or suspicious HTML comments