← Back to Skills Marketplace
loutai0307-prog

Bytesagain Fortune Teller

by loutai0307-prog · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
84
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install bytesagain-fortune-teller
Description
Draw tarot cards, cast I Ching hexagrams, and check daily fortunes for fun. Use when pulling spreads, casting hexagrams, or playing fortune games.
README (SKILL.md)

Fortune Teller

算命娱乐。塔罗牌、易经占卜、每日运程、缘分测试、数字命理、手相(娱乐)。Fortune teller for fun with tarot, I Ching. 算命、塔罗、占卜、娱乐。

使用场景

💡 无论你是新手还是专业人士,都能快速上手

命令速查

  tarot           tarot
  iching          iching
  daily           daily
  compatibility   compatibility
  numerology      numerology
  palmistry       palmistry

Fortune Teller by BytesAgain

💬 Feedback & Feature Requests: https://bytesagain.com/feedback Powered by BytesAgain | bytesagain.com

  • Run fortune-teller help for commands

  • No API keys needed

  • Run fortune-teller help for all commands

Commands

Run fortune-teller help to see all available commands.

Output

Results go to stdout. Save with fortune-teller run > output.txt.

Configuration

Set FORTUNE_TELLER_DIR to change data directory. Default: ~/.local/share/fortune-teller/

Usage Guidance
This skill appears to do what it says: local, offline fortune-telling. Before installing or running it, note that it will create a directory (default ~/.local/share/fortune-teller) and write history.log and data.log which may contain any text you add (so avoid entering secrets). There are no network calls or required API keys. If you prefer isolation, set FORTUNE_TELLER_DIR to a sandbox folder or inspect the scripts locally before running. Also be aware SKILL.md references a 'fortune-teller' command but no install step is provided — you may need to place the included scripts on your PATH or run them directly.
Capability Analysis
Type: OpenClaw Skill Name: bytesagain-fortune-teller Version: 1.0.0 The skill contains multiple shell injection vulnerabilities in 'scripts/fortune.sh' and 'scripts/script.sh' due to unquoted variable expansion (e.g., '$INPUT' and '$*'). These flaws could allow arbitrary command execution if the agent passes unsanitized input to commands like 'bazi', 'add', or 'search'. While the code appears to be a legitimate fortune-telling utility and lacks evidence of intentional malice or data exfiltration, the high-risk nature of these vulnerabilities warrants a suspicious classification.
Capability Assessment
Purpose & Capability
Name/description (tarot, I Ching, daily fortunes) match the included scripts. The two scripts implement fortune commands (bazi, daily, zodiac) and a small local data CLI (run/add/list/search). No unrelated credentials or binaries are requested.
Instruction Scope
SKILL.md directs users to run the CLI and mentions FORTUNE_TELLER_DIR. The runtime scripts read standard env vars (XDG_DATA_HOME, HOME) and write to a data directory. They log user actions to history.log and append entries to data.log — so user inputs may be stored locally. There are no network calls or instructions to read other system files.
Install Mechanism
No install spec (instruction-only). The package includes plain shell scripts and an inline Python invocation. Nothing is downloaded or extracted from remote URLs during install.
Credentials
The skill declares no required env vars or credentials. At runtime the scripts consult FORTUNE_TELLER_DIR (optional), XDG_DATA_HOME, and HOME — all reasonable for configuring a local data directory.
Persistence & Privilege
The scripts create and write files under the user's data directory (default ~/.local/share/fortune-teller) including data.log and history.log. always:false and no elevated privileges are requested. Persistence is limited to the skill's own data directory.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install bytesagain-fortune-teller
  3. After installation, invoke the skill by name or use /bytesagain-fortune-teller
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Restored with improvements
Metadata
Slug bytesagain-fortune-teller
Version 1.0.0
License MIT-0
All-time Installs 1
Active Installs 1
Total Versions 1
Frequently Asked Questions

What is Bytesagain Fortune Teller?

Draw tarot cards, cast I Ching hexagrams, and check daily fortunes for fun. Use when pulling spreads, casting hexagrams, or playing fortune games. It is an AI Agent Skill for Claude Code / OpenClaw, with 84 downloads so far.

How do I install Bytesagain Fortune Teller?

Run "/install bytesagain-fortune-teller" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Bytesagain Fortune Teller free?

Yes, Bytesagain Fortune Teller is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Bytesagain Fortune Teller support?

Bytesagain Fortune Teller is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Bytesagain Fortune Teller?

It is built and maintained by loutai0307-prog (@loutai0307-prog); the current version is v1.0.0.

💬 Comments