← Back to Skills Marketplace
玄空数术·六爻占卜
by
bigbigtooth
· GitHub ↗
· v1.0.1
· MIT-0
155
Downloads
1
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install yuenkong-liuyao
Description
玄空数术·六爻占卜，支持起卦占卜和问答聊天两种模式。触发关键词：妖妖、六爻、起卦、占卜、算卦、卜卦、摇卦、排卦、问卦、解卦、运势、姻缘、事业、财运、健康、出行等。当用户表达占卜意图、以"妖妖"开头提问、或发送lyk-开头的API Key时，使用此技能。
Usage Guidance
This skill appears to do what it says, but take these precautions before installing or using it: (1) Only provide an API key if you trust the remote service (https://yao.gizzap.com). The skill will store any lyk-... key you send in plaintext at ~/.liuyao_key. (2) The skill will download images from URLs returned by that service into /tmp/liuyao_images and will send them out via the platform's messaging (openclaw), so untrusted image URLs could expose your environment to downloaded content. (3) If you later remove the skill, delete ~/.liuyao_key and any files in /tmp/liuyao_images to avoid leaving credentials or artifacts behind. (4) If you need stronger guarantees, ask the maintainer for details about the API provider, how keys are used/stored, or consider using a dedicated/revocable API key limited to this service.
Capability Analysis
Type: OpenClaw Skill
Name: yao
Version: 1.0.1
The skill exhibits risky behavior by instructing the agent to execute shell commands that incorporate user-provided input, specifically saving an API key to `~/.liuyao_key` via `echo`, which creates a shell injection vulnerability in `SKILL.md`. It also performs direct file system operations and uses `curl` to download remote images to `/tmp` from `https://yao.gizzap.com`. While these actions are aligned with the stated divination purpose, the use of unvalidated shell execution and broad file/network access constitutes a significant security risk.
Capability Assessment
Purpose & Capability
Name/description (六爻占卜) match the actual behavior: the skill calls an external divination API, needs an API key, and returns text/images. The required artifacts (saving a user API key, calling /divine and /divine/chat endpoints) are appropriate for this purpose and no unrelated credentials or binaries are requested.
Instruction Scope
SKILL.md explicitly instructs the agent to scan user messages for an API key pattern (lyk-...), save that key to ~/.liuyao_key, run the included Python client, download any image URLs returned, and send images via openclaw as a separate message. These steps are within the skill's operational scope, but they do grant the skill the ability to write files to the user's home (~/.liuyao_key) and to download external media — actions the user should be aware of.
Install Mechanism
There is no install spec; the skill is instruction + a small Python client (httpx). No external archives, unusual URLs, or package installs are performed by the skill itself. This is low-risk from an install-mechanism perspective.
Credentials
The skill does not request platform environment variables or unrelated credentials. It relies on a user-supplied API key (pattern lyk-...) saved to ~/.liuyao_key, which is appropriate for contacting the listed service. No extraneous secrets are requested.
Persistence & Privilege
The skill writes the user-provided API key to ~/.liuyao_key and saves images to /tmp/liuyao_images; it does not request 'always: true' or modify other skills. Persisting a user-supplied secret to a predictable local file is expected for this client but is a persistence behavior the user should consider (key stored in plaintext).
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install yuenkong-liuyao - After installation, invoke the skill by name or use
/yuenkong-liuyao - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- 更新技能名称为 YuenKong_liuyao，并优化描述，强调“玄空数术·六爻占卜”
- 其余功能、工作流程、命令规范、人设以及消息处理流程均保持不变
- 提供更准确的服务接入地址与技能品牌识别
v1.0.0
- Initial release of the liuyao-divination skill.
- Provides 六爻 (Liu Yao) divination service with both divination and chat modes.
- Supports detailed workflows: API Key verification, number input, category selection, and image handling.
- Interactions use a distinctive "妖妖" persona with a cyberpunk, friendly, and mystical tone.
- Implements image handling: divination results may include an image that must be sent as a separate message before the text.
- Supports a range of trigger keywords for both divination and chat, and clear instructions for all user interactions.
Metadata
Frequently Asked Questions
What is 玄空数术·六爻占卜?
玄空数术·六爻占卜，支持起卦占卜和问答聊天两种模式。触发关键词：妖妖、六爻、起卦、占卜、算卦、卜卦、摇卦、排卦、问卦、解卦、运势、姻缘、事业、财运、健康、出行等。当用户表达占卜意图、以"妖妖"开头提问、或发送lyk-开头的API Key时，使用此技能。 It is an AI Agent Skill for Claude Code / OpenClaw, with 155 downloads so far.
How do I install 玄空数术·六爻占卜?
Run "/install yuenkong-liuyao" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is 玄空数术·六爻占卜 free?
Yes, 玄空数术·六爻占卜 is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does 玄空数术·六爻占卜 support?
玄空数术·六爻占卜 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created 玄空数术·六爻占卜?
It is built and maintained by bigbigtooth (@bigbigtooth); the current version is v1.0.1.
More Skills