Astrology Foreteller

星座配对 + 塔罗牌占卜占位版本。妮妮开发的占位版本，待2.0版本更新。

This looks like a benign placeholder skill: it runs the included Python scripts locally to produce astrology and tarot outputs, and it asks for no credentials or external installs. Before installing, consider: (1) the trigger executes the shipped Python code via subprocess — review scripts/compatibility.py, scripts/tarot.py, and trigger.py if you want to be certain of behavior; (2) future 2.0 updates could change behavior or add network I/O, so re-check permissions and code when updated; (3) if you run agents in a high-security environment, avoid installing skills that execute arbitrary local code unless you trust the author. Otherwise this skill appears internally consistent with its stated purpose.

Type: OpenClaw Skill Name: zodiac-tarot-master Version: 1.0.0 The skill bundle provides legitimate zodiac compatibility and tarot reading functionality as described in its documentation. The Python scripts (compatibility.py, tarot.py, and trigger.py) use safe subprocess calls with list-based arguments and implement strict input validation by matching user queries against predefined allow-lists of zodiac signs and divination types. No evidence of data exfiltration, shell injection, or malicious prompt instructions was found.