bazi-ziwei

Pass

Audited by Gen Agent Trust Hub on Jun 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill requires the AI agent to execute local Node.js scripts provided in the package (run-chart.js, dump-text.js, render.js). These scripts perform the mathematical and astronomical calculations needed for astrological charting, which is a recommended practice to avoid LLM hallucinations in technical domains.
  • [EXTERNAL_DOWNLOADS]: During installation or first use, the skill instructs the agent to run npm install to download the lunar-typescript library. This is a well-known, legitimate open-source package used for calendar conversions.
  • [SAFE]: The skill explicitly focuses on privacy, stating that all calculations are performed locally without network access. Review of the source code confirms that it primarily uses the Node.js fs module for local file I/O and does not perform any unauthorized data transmission or credential harvesting.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 17, 2026, 08:03 AM
Security Audit — agent-trust-hub — bazi-ziwei