计算八字以及大运流年信息，需要性别、ISO 8601 格式的时间两个参数

This skill appears to do what it says, but exercise caution before using it with real personal data. It POSTs name/gender/date-of-birth to http://api.bagezi.top (note: plain HTTP, not HTTPS), so unencrypted interception is possible and the recipient is an unknown third party. Before installing or running: (1) avoid sending sensitive/real PII unless you trust the service; (2) prefer an HTTPS endpoint — contact the author or verify api.bagezi.top supports TLS; (3) run the script in an isolated environment (virtualenv/container) and ensure the 'requests' package is installed from a trusted source; (4) inspect network traffic (e.g., with a proxy) if you need to confirm where data goes; (5) if privacy is a concern, seek a local/offline implementation or a reputable provider with a privacy policy. If you need higher assurance, request the maintainer provide HTTPS endpoints and a declared install spec or host the code on a verifiable repository.

Type: OpenClaw Skill Name: bazi Version: 1.0.2 The skill is a simple CLI wrapper for a Chinese astrology (Bazi) calculation service. The script `paipan.py` takes user-provided input (name, gender, and birthdate) and sends it via a POST request to an external API endpoint (`http://api.bagezi.top/api/paipan`). The code logic is transparent, lacks obfuscation, and contains no hidden functionality or attempts to access sensitive local system data. While the use of unencrypted HTTP for transmitting personal details is a minor security oversight, the behavior is entirely consistent with the stated purpose in `SKILL.md`.