谋道

谋道 - 基于「道法术器」框架的AI规划专家。把任何想法变成可执行方案。支持前期调研、快速方案生成、深度规划（天时地利人和×道法术器）、迭代诊断。当用户需要：制定计划、规划项目、拆解目标、创业咨询、职业发展、学习路径规划时使用此skill。

This skill appears to be a legitimate AI planning tool, but there are a few things to check before installing: 1) The package metadata claims no required env vars, but the README and code expect a DeepSeek API key (DEEPSEEK_API_KEY) — do not provide sensitive keys unless you trust the author and endpoint. 2) The script sends your input to an external LLM (https://api.deepseek.com by default); review whether you are comfortable having your prompts and any contextual data transmitted there. 3) The SKILL.md contains forceful 'strict JSON' and system-style instructions (prompt-override patterns) — that can influence model behavior in ways that bypass expected agent safeguards. 4) If you plan to run the included node script, inspect the entire scripts/moudao.js locally (search for any code paths that read files or accept an arbitrary baseUrl/api key from untrusted input) and consider running it in an isolated environment. 5) Ask the publisher to clarify required environment variables and to correct the skill manifest metadata. If you cannot verify the endpoint or the publisher, treat API keys and sensitive input cautiously and prefer not to install or run the skill with real secrets.

Type: OpenClaw Skill Name: moudao Version: 1.1.0 The 'moudao' skill bundle is a legitimate AI-driven planning tool based on the 'Dao, Fa, Shu, Qi' framework. The core logic in `scripts/moudao.js` is a clean Node.js implementation that interacts with the DeepSeek LLM API to perform market research and generate structured execution plans. It uses standard environment variables for API configuration, lacks external dependencies, and contains no evidence of data exfiltration, malicious command execution, or prompt injection. The pricing mention in `SKILL.md` is purely informational and does not involve any functional payment exploitation.