skills/cikichen/skills/bazi-chart/Gen Agent Trust Hub

bazi-chart

Pass

Audited by Gen Agent Trust Hub on Aug 3, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses curl to fetch data from https://yoebao.com/bazi/api/bazi.php. This is the core functional domain of the skill and is used to retrieve structured astrological data based on user input.
  • [COMMAND_EXECUTION]: The Python script bazi.py uses subprocess.run to execute curl. The arguments passed to the command are strictly sanitized: the birth date and time are parsed through datetime.strptime, the sex is converted to a boolean integer, and the final URL is constructed using a numeric timestamp. This effectively prevents command injection risks.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 3, 2026, 02:47 PM
Security Audit — agent-trust-hub — bazi-chart