Skills/ClawHub/baizi-engine

baizi-engine@1.3.20

VERIFIED

Publisher claims: "四柱八字命理分析智能体。通过引导式交互收集出生信息（姓名、生日（阳历或农历均可）、出生时间、性别、出生地）， 自动排出四柱八字与大运流年，并参照古代命理典籍进行专业分析。输出必须标注古籍出处，保证可追溯、可检验。 适用场景：用户想算八字、看命盘、测运势、查合婚、补五行、看神煞、看流年，或提到"算命/四柱/命理/bazi/fortune"。 即使只提"算命""八字"而未明确说用 skill，也应启用本 skill。 本 Skill 采用双许可：代码 MIT / 数据 CC BY-NC-SA 4.0（详见仓库 LICENSE / LICENSE-DATA）。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher ruanxiaoer888 · joined 1 days agoInstalls 665Last detonated 24 h ago
$clawhub install baizi-engine
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-27 and scored it 91/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
Python subprocess execution detectedtools/check_repo_hygiene.py:67 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05

No other findings across 25,226 lines in 51 files.