wuxingbazi-daily

老黄历Daily - 传统五行命理与每日运势工具。当用户询问生辰八字、五行属性、命格分析、每日运势提醒、黄历宜忌时使用此 Skill。功能包括：根据生日计算五行命理（金木水火土）、分析八字命格、生成每日运势与宜忌建议。

This skill appears to implement local 八字/五行 calculations and daily-fortune text generation without network access or credential use, but there are a few things to check before installing: - Path mismatch: SKILL.md and README run scripts from a 'scripts/' folder and reference a 'references/' folder, but the shipped files are at the repository root. Verify where the .py files actually live and update commands (or move files) so the runtime finds them. Running the examples as-written will likely fail. - Cron persistence: The docs propose creating a cron job (example uses a 'cron add' helper). That will persist on your system and require permission. Confirm the exact cron command you want (many systems use crontab -e or a specific scheduler). Review the created cron entry before allowing it, and consider creating it manually instead of letting an agent do it automatically. - Execution context: The scripts are pure Python and manipulate only local data and system time. Still, run them in a controlled environment first (locally or in a container) to validate outputs and ensure they behave as expected. - No credentials/network: The skill does not require secrets or perform outbound network calls, which reduces exfiltration risk. If a later version adds HTTP calls or requests environment variables, treat that as a red flag. If you trust the author and are comfortable fixing the path/cron issues, the code itself is coherent with the described purpose. If you do not trust the source or cannot test in isolation, avoid installing the cron persistence and run the scripts locally for testing first.

Type: OpenClaw Skill Name: wuxingbazi-daily Version: 1.0.1 The skill bundle is a legitimate implementation of a Chinese astrology tool (Bazi/Wuxing) for calculating personal elements and daily fortunes. It consists of Python scripts (calculate_wuxing.py, daily_fortune.py, lunar_convert.py) that perform local calculations without any network access, file system modifications, or sensitive data access. The use of cron in SKILL.md is explicitly for a user-requested daily reminder feature, and no evidence of malicious intent, prompt injection, or obfuscation was found.