← 返回 Skills 市场
玄空数术·六爻占卜
作者
bigbigtooth
· GitHub ↗
· v1.0.1
· MIT-0
155
总下载
1
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install yuenkong-liuyao
功能描述
玄空数术·六爻占卜,支持起卦占卜和问答聊天两种模式。触发关键词:妖妖、六爻、起卦、占卜、算卦、卜卦、摇卦、排卦、问卦、解卦、运势、姻缘、事业、财运、健康、出行等。当用户表达占卜意图、以"妖妖"开头提问、或发送lyk-开头的API Key时,使用此技能。
安全使用建议
This skill appears to do what it says, but take these precautions before installing or using it: (1) Only provide an API key if you trust the remote service (https://yao.gizzap.com). The skill will store any lyk-... key you send in plaintext at ~/.liuyao_key. (2) The skill will download images from URLs returned by that service into /tmp/liuyao_images and will send them out via the platform's messaging (openclaw), so untrusted image URLs could expose your environment to downloaded content. (3) If you later remove the skill, delete ~/.liuyao_key and any files in /tmp/liuyao_images to avoid leaving credentials or artifacts behind. (4) If you need stronger guarantees, ask the maintainer for details about the API provider, how keys are used/stored, or consider using a dedicated/revocable API key limited to this service.
功能分析
Type: OpenClaw Skill
Name: yao
Version: 1.0.1
The skill exhibits risky behavior by instructing the agent to execute shell commands that incorporate user-provided input, specifically saving an API key to `~/.liuyao_key` via `echo`, which creates a shell injection vulnerability in `SKILL.md`. It also performs direct file system operations and uses `curl` to download remote images to `/tmp` from `https://yao.gizzap.com`. While these actions are aligned with the stated divination purpose, the use of unvalidated shell execution and broad file/network access constitutes a significant security risk.
能力评估
Purpose & Capability
Name/description (六爻占卜) match the actual behavior: the skill calls an external divination API, needs an API key, and returns text/images. The required artifacts (saving a user API key, calling /divine and /divine/chat endpoints) are appropriate for this purpose and no unrelated credentials or binaries are requested.
Instruction Scope
SKILL.md explicitly instructs the agent to scan user messages for an API key pattern (lyk-...), save that key to ~/.liuyao_key, run the included Python client, download any image URLs returned, and send images via openclaw as a separate message. These steps are within the skill's operational scope, but they do grant the skill the ability to write files to the user's home (~/.liuyao_key) and to download external media — actions the user should be aware of.
Install Mechanism
There is no install spec; the skill is instruction + a small Python client (httpx). No external archives, unusual URLs, or package installs are performed by the skill itself. This is low-risk from an install-mechanism perspective.
Credentials
The skill does not request platform environment variables or unrelated credentials. It relies on a user-supplied API key (pattern lyk-...) saved to ~/.liuyao_key, which is appropriate for contacting the listed service. No extraneous secrets are requested.
Persistence & Privilege
The skill writes the user-provided API key to ~/.liuyao_key and saves images to /tmp/liuyao_images; it does not request 'always: true' or modify other skills. Persisting a user-supplied secret to a predictable local file is expected for this client but is a persistence behavior the user should consider (key stored in plaintext).
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install yuenkong-liuyao - 安装完成后,直接呼叫该 Skill 的名称或使用
/yuenkong-liuyao触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
- 更新技能名称为 YuenKong_liuyao,并优化描述,强调“玄空数术·六爻占卜”
- 其余功能、工作流程、命令规范、人设以及消息处理流程均保持不变
- 提供更准确的服务接入地址与技能品牌识别
v1.0.0
- Initial release of the liuyao-divination skill.
- Provides 六爻 (Liu Yao) divination service with both divination and chat modes.
- Supports detailed workflows: API Key verification, number input, category selection, and image handling.
- Interactions use a distinctive "妖妖" persona with a cyberpunk, friendly, and mystical tone.
- Implements image handling: divination results may include an image that must be sent as a separate message before the text.
- Supports a range of trigger keywords for both divination and chat, and clear instructions for all user interactions.
元数据
常见问题
玄空数术·六爻占卜 是什么?
玄空数术·六爻占卜,支持起卦占卜和问答聊天两种模式。触发关键词:妖妖、六爻、起卦、占卜、算卦、卜卦、摇卦、排卦、问卦、解卦、运势、姻缘、事业、财运、健康、出行等。当用户表达占卜意图、以"妖妖"开头提问、或发送lyk-开头的API Key时,使用此技能。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 155 次。
如何安装 玄空数术·六爻占卜?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install yuenkong-liuyao」即可一键安装,无需额外配置。
玄空数术·六爻占卜 是免费的吗?
是的,玄空数术·六爻占卜 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
玄空数术·六爻占卜 支持哪些平台?
玄空数术·六爻占卜 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 玄空数术·六爻占卜?
由 bigbigtooth(@bigbigtooth)开发并维护,当前版本 v1.0.1。
推荐 Skills