← 返回 Skills 市场
94
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install iaskaster
功能描述
命理八字分析技能。用户说"算命"、"排八字"、"看八字"、"命理分析"、"八字分析"、"运势"、"算一卦"、"命盘"、"排盘"、"算卦"、"五行分析"、"八字测算"时触发。调用 iaskaster 生成专业 PDF 报告。 / Bazi fortune-telling skill. Use when user r...
使用说明 (SKILL.md)
命理八字分析 (Bazi Fortune-Telling)
何时使用 / When to Use
- 用户要"算命"、"排八字"、"看八字"、"命理分析"。 / User wants fortune-telling or Bazi analysis.
- 用户要"运势"、"算一卦"、"命盘"、"算卦"。 / User wants fate reading or horoscope chart.
- 用户要"五行分析"、"八字测算"、"八字解读"。 / User wants Five Elements analysis or detailed Bazi reading.
- 用户要查询、下载或解读已有的八字分析报告。 / User wants to query, download, or read existing Bazi reports.
前置依赖 / Prerequisites
- 推荐运行环境:Node 18+。 / Recommended runtime: Node 18+.
- 执行目录:在 skill 根目录(
SKILL.md所在目录)执行以下命令。 / Run commands in the skill root (whereSKILL.mdis located).
npm i && npm run build
工具清单 / Tool Index
index.js --tool iaskaster_auto:自动化流程入口,包含登录、提交、状态查询等核心操作。 / Main flow entry point with login, submit, status operations.index.js --tool iaskaster_list:查询用户的报告列表。 / List user's report history.index.js --tool iaskaster_download:下载或导出报告为 PDF。 / Download or export report as PDF.index.js --tool iaskaster_bazi:八字解读与详细分析。 / Bazi interpretation and detailed analysis.index.js --tool iaskaster_fortune:运势分析、流年运势。 / Fortune analysis and yearly horoscope.index.js --tool iaskaster_balance:查询账户余额或剩余额度。 / Query account balance or remaining quota.index.js --tool iaskaster_recharge:获取充值链接。 / Get recharge link.index.js --tool iaskaster_read:解读/阅读已有 PDF 报告。 / Read and interpret existing PDF reports.index.js --tool iaskaster_form:获取出生信息表单。 / Get birth info form.
工具与参数 / Tools & Parameters
iaskaster_auto
# 基础用法
node index.js --tool iaskaster_auto '{"action":"\x3Caction>"}'
# 独立命令示例
node index.js --tool iaskaster_auto '{"action":"form"}'
node index.js --tool iaskaster_auto '{"action":"check_login"}'
node index.js --tool iaskaster_auto '{"action":"send_code","contact":"13800000000"}'
node index.js --tool iaskaster_auto '{"action":"verify_code","contact":"13800000000","code":"123456"}'
node index.js --tool iaskaster_auto '{"action":"submit","birthInfo":"姓名:张三\
性别:男\
出生日期:1990年1月1日\
出生时间:12时30分\
日历类型:公历"}'
node index.js --tool iaskaster_auto '{"action":"status"}'
参数定义 / Parameters:
action(必填 / required)- 取值范围:
form,check_login,send_code,verify_code,submit,status - 说明:
form:获取表单信息check_login:检查登录状态send_code:发送验证码verify_code:验证登录submit:提交分析请求status:查询流程状态
- 取值范围:
contact(条件 / conditional)- 说明:手机号或邮箱(
send_code/verify_code时需要)
- 说明:手机号或邮箱(
code(条件 / conditional)- 说明:验证码(
verify_code时需要)
- 说明:验证码(
name(条件 / conditional)- 说明:姓名(
submit时需要)
- 说明:姓名(
birthInfo(条件 / conditional)- 格式:多行文本,包含姓名、性别、出生日期、出生时间、日历类型等
- 说明:出生信息(
submit时需要)
iaskaster_list
node index.js --tool iaskaster_list '{}'
列出用户的历史报告列表。/ List user's historical reports.
iaskaster_download
node index.js --tool iaskaster_download '{"action":"show","reportId":"123"}'
node index.js --tool iaskaster_download '{"action":"download","reportId":"123"}'
node index.js --tool iaskaster_download '{"action":"list"}'
action:show(查看)/download(下载)/list(列表)reportId:报告IDoutputPath:下载保存路径(可选)
iaskaster_bazi
node index.js --tool iaskaster_bazi '{"reportId":"123","aspect":"overview"}'
八字解读与详细分析。/ Bazi interpretation and detailed analysis.
iaskaster_fortune
node index.js --tool iaskaster_fortune '{"intent":"wealth","period":"this_year"}'
运势分析与流年运势。/ Fortune analysis and yearly horoscope.
iaskaster_balance
node index.js --tool iaskaster_balance '{}'
查询账户余额与剩余额度。/ Query account balance and remaining quota.
iaskaster_recharge
tsx scripts/recharge.ts
获取充值链接。/ Get recharge link.
iaskaster_read
node index.js --tool iaskaster_read '{"filename":"report_xxx.pdf"}'
filename(必填 / required)- 说明:PDF 报告文件名
示例 / Examples
# 获取表单信息
node index.js --tool iaskaster_auto '{"action":"form"}'
# 检查登录状态
node index.js --tool iaskaster_auto '{"action":"check_login"}'
# 发送验证码
node index.js --tool iaskaster_auto '{"action":"send_code","contact":"13800000000"}'
# 验证码登录
node index.js --tool iaskaster_auto '{"action":"verify_code","contact":"13800000000","code":"123456"}'
# 提交分析请求
node index.js --tool iaskaster_auto '{"action":"submit","birthInfo":"姓名:张三\
性别:男\
出生日期:1990年1月1日\
出生时间:12时30分\
日历类型:公历"}'
# 查询流程状态
node index.js --tool iaskaster_auto '{"action":"status"}'
# 查看报告列表
node index.js --tool iaskaster_list '{}'
# 下载报告
node index.js --tool iaskaster_download '{"action":"download","reportId":"123"}'
# 八字解读
node index.js --tool iaskaster_bazi '{}'
# 运势分析
node index.js --tool iaskaster_fortune '{"intent":"wealth"}'
# 查询余额
node index.js --tool iaskaster_balance '{}'
# 获取充值链接
node index.js --tool iaskaster_recharge '{}'
# 解读PDF报告
node index.js --tool iaskaster_read '{"filename":"report_xxx.pdf"}'
注意事项 / Notes
- 所有命令均在 skill 根目录执行,不依赖仓库根目录路径。 / Run all commands in the skill root; do not rely on repo-root paths.
- 出生信息格式为多行文本,包含姓名、性别、出生日期、出生时间、日历类型等。 / Birth info is multi-line text with name, gender, birth date, time, calendar type.
- 首次使用需先通过验证码登录。 / First-time users need to login via verification code.
- 提交分析后可通过
status命令查询进度。 / After submitting, usestatusto check progress.
安全使用建议
Before installing: 1) Review index.js to confirm what paths the iaskaster_read tool will allow reading—ensure it cannot read arbitrary sensitive files. 2) Confirm you trust the external domain (https://iaskmaster.cn) because the skill sends user tokens and birth data to it. 3) Understand that running install.sh will copy files into your ~/.openclaw workspace, run npm install (puppeteer-core), and modify openclaw.json (adding allowBundled and load.extraDirs and enabling the skill). If you don't want global config changes, do not run install.sh; instead examine the code and run in a sandbox. 4) Note the SKILL.md references an $IASKASTER variable not declared—ask the author how the runtime path is set or test in a safe environment. 5) Avoid entering real personal phone numbers or sensitive data until you confirm the service and storage policy. If you want to proceed, inspect the code (index.js) for exact file-read and network behaviors and consider running it within a restricted account or container.
功能分析
Type: OpenClaw Skill
Name: iaskaster
Version: 1.0.0
The skill bundle contains a significant security flaw in the 'iaskaster_read' tool within 'index.js', which allows for arbitrary file reads. The implementation takes a 'filename' parameter and returns the file's content as a Base64 string without any path validation or sandboxing, enabling an attacker to exfiltrate sensitive system files (e.g., SSH keys, config files) via prompt injection. Additionally, 'install.sh' performs broad modifications to the global 'openclaw.json' configuration, and the 'iaskaster_recharge' tool utilizes 'child_process.exec' to launch system browsers. While these capabilities are aligned with the stated purpose of generating and reading fortune-telling reports, the lack of safety constraints on file access is highly risky.
能力评估
Purpose & Capability
The skill's declared purpose (Bazi/fortune-telling) aligns with network access and an external API (iaskmaster.cn). However SKILL.md actions reference $IASKASTER (node $IASKASTER/index.js ...) even though no IASKASTER env var is declared in the registry requirements; openclaw.plugin.json provides IASKASTER_API_URL as a config option but the SKILL.md variable usage is inconsistent. Modifying OpenClaw's config to add the skill (install.sh) is reasonable for install but is a broader change than the skill's stated functionality and should be expected/confirmed.
Instruction Scope
Runtime instructions perform login (send/verify codes), submit birth data to the external API, poll for report generation, and download PDF reports. The tool includes a 'read' action that reads a specified filename and returns Base64 (iaskaster_read). That can be used to read arbitrary files if not path-restricted. SKILL.md also instructs running npm install/build locally and relies on running node index.js—both normal—but the interplay between manual install and install.sh is confusing. SKILL.md expects working directory variables ($IASKASTER) that are not documented.
Install Mechanism
There is no registry install spec but an install.sh is provided. install.sh copies the skill into the gateway workspace, runs npm install (or puppeteer-core only in bundle mode), and uses a node -e snippet to update openclaw.json (adding allowBundled, extraDirs, entries.iaskaster). Installing npm deps (puppeteer-core) is expected for PDF/screenshot features but running an install script that edits global OpenClaw config is invasive and should be reviewed before running.
Credentials
The skill does not declare required env vars in the registry metadata, but the code reads process.env.IASKASTER_API_URL and process.env.IASKASTER_TOKEN_FILE and SKILL.md uses $IASKASTER in commands. The skill creates local token/uid files (.iaskaster-token, .iaskaster-uid) and will send Authorization Bearer tokens to the external API—this is expected for a networked service but you should be aware it stores credentials on disk. No unrelated credentials (AWS, etc.) are requested.
Persistence & Privilege
always:false (good). The install script modifies the global openclaw.json to add/load the skill and allow bundled skills and extraDirs; that is persistent and affects the gateway configuration beyond just copying files. The skill also writes token/uid files to disk. These are normal for an installed skill, but they are persistent changes and should be permitted explicitly by the administrator.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install iaskaster - 安装完成后,直接呼叫该 Skill 的名称或使用
/iaskaster触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
iaskaster 1.0.0
- 首次发布命理八字分析工具,支持通过外部 API 生成专业 PDF 报告。
- 明确触发词使用场景,仅首次分析时调用外部生成流程。
- 完整登录与分析工作流:支持手机号/邮箱登录、验证码、表单填写、实时进度轮询、报告下载。
- 多工具集成,如自动流程、报告查询、下载、解读等。
- 提供标准化输出模版与服务器安装说明。
元数据
常见问题
iaskaster 是什么?
命理八字分析技能。用户说"算命"、"排八字"、"看八字"、"命理分析"、"八字分析"、"运势"、"算一卦"、"命盘"、"排盘"、"算卦"、"五行分析"、"八字测算"时触发。调用 iaskaster 生成专业 PDF 报告。 / Bazi fortune-telling skill. Use when user r... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 94 次。
如何安装 iaskaster?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install iaskaster」即可一键安装,无需额外配置。
iaskaster 是免费的吗?
是的,iaskaster 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
iaskaster 支持哪些平台?
iaskaster 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 iaskaster?
由 简单的李(@tjlzw)开发并维护,当前版本 v1.0.0。
推荐 Skills