中文 EN

扫描报告

扫描新文件

✓ 可信 — 风险评分 0/100
上次扫描：2 天前 重新扫描
0 /100
liuren-skill
大六壬排盘与断卦技能 - Ancient Chinese divination skill for fortune-telling
This is a legitimate Chinese metaphysics (大六壬) divination skill with purely mathematical/algorithmic JavaScript code. No shell execution, network access, filesystem writes, credential harvesting, or any malicious behavior detected.
技能名称liuren-skill
分析耗时21.9s
引擎pi
✓
可以安装
No action needed. The skill is safe to use as declared.

安全发现 1 项

严重性 安全发现 位置
提示
Documentation Minor Mismatch
SKILL.md examples show Python script usage (liuren_pan.py), but the actual implementation is JavaScript (index.js). This is a documentation inconsistency but not a security issue.
python3 ~/.openclaw/skills/liuren-skill/scripts/liuren_pan.py
→ Update SKILL.md to reflect the actual JavaScript implementation, or add the referenced Python script.
 SKILL.md:63
资源类型声明权限推断权限状态证据
文件系统 NONE NONE — No filesystem access in code
网络访问 NONE NONE — No network calls in code
命令执行 NONE NONE — No subprocess/exec calls in code
环境变量 NONE NONE — No env iteration in code
技能调用 NONE NONE — No cross-skill invocation
剪贴板 NONE NONE — No clipboard access
浏览器 NONE NONE — No browser access
数据库 NONE NONE — No database access

目录结构

2 文件 · 16.1 KB · 629 行
Markdown 1f · 368L JavaScript 1f · 261L
├─ 📜 index.js JavaScript 261L · 7.0 KB
└─ 📝 SKILL.md Markdown 368L · 9.1 KB

安全亮点

✓ No shell execution (no child_process, exec, spawn)
✓ No network access (no fetch, http, axios)
✓ No filesystem writes or sensitive path access
✓ No credential harvesting or environment variable iteration
✓ No obfuscated code, eval, or base64 payloads
✓ No external dependencies or suspicious imports
✓ Code is readable and well-structured with clear mathematical algorithms
✓ No hidden functionality or suspicious HTML comments