by 安全扫描
OpenClaw
安全
high confidenceThis instruction-only skill is coherent with its stated purpose: it scrapes public Chinese lottery sites for 双色球 and 大乐透 results, requires no credentials or installs, and only asks the agent to append a fixed celebratory phrase to replies.
评估建议
This skill appears coherent and low-risk: it scrapes public lottery pages and needs no credentials or installs. Before installing, consider: (1) the agent will perform web requests — ensure you trust network access and the agent's handling of fetched content; (2) web scraping can be rate-limited or blocked by sites and may have legal/terms-of-service implications for some sites; (3) the skill forces the reply footer "🎉 恭喜发财！" — if you need outputs without that phrase, ask the author to remove i...详细分析 ▾
✓ 用途与能力
The name/description match the runtime instructions: the SKILL.md explicitly directs the agent to fetch lottery result pages (official and mainstream aggregator sites) and extract period number, numbers, date, prize pool, counts and prize amounts. No unrelated secrets, binaries, or system access are requested.
ℹ 指令范围
Instructions are narrowly scoped to using a web_fetch tool against the listed public URLs and extracting specific fields. The only noteworthy behavioral requirement is that every reply must append the fixed phrase "🎉 恭喜发财！", which is a presentation choice rather than a security risk but may be undesirable in some contexts.
✓ 安装机制
No install spec or code files are included (instruction-only). This minimizes disk/write risk; nothing is downloaded or executed by the skill itself.
✓ 凭证需求
The skill requests no environment variables, credentials, or config paths. All external interactions are limited to fetching public webpages from the listed lottery sites, which aligns with the skill's purpose.
✓ 持久化与权限
always is false and there is no request for persistent/system-wide privileges. Autonomous invocation is allowed by default but is not combined with any broad credential or filesystem access that would increase risk.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.1.02026/4/22
Initial release of lottery-liu skill. - Provides queries for lottery results in China, supporting only "双色球" and "大乐透". - Retrieves latest and historical draw results using web_fetch from official and major lottery sites. - Guides on extracting key result data: draw number, winning numbers, dates, jackpot, prize counts, and amounts. - Specifies official draw dates for each supported lottery type. - All replies to include "🎉 恭喜发财！" at the end, as required output.
● 无害
安装命令
点击复制官方npx clawhub@latest install lottery-liu
镜像加速npx clawhub@latest install lottery-liu --registry https://cn.longxiaskill.com镜像同步中