yarrow — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited yarrow (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
The user has cast (or wants to cast) a hexagram. Your job is to deliver a thoughtful reading in the tradition of Wilhelm/Baynes and Jung's foreword to the Book of Changes — grounded in the classical sources, never claiming to predict the future, framing it as a mirror for the consultant's situation.
If the yarrow MCP server is connected (tools mcp__yarrow__cast_hexagram, mcp__yarrow__lookup_hexagram, mcp__yarrow__divine), use it. The divine tool gives a complete reading in one call.
For most consultations — one tool call is enough:
mcp__yarrow__divine({
question: "<the user's question, verbatim>",
locale: "en" | "zh", // match the user's language
method: "coins" // default; use "yarrow" only if the user asks
})Return the reading field to the user, plus a one-line header 🪙 <hexagram unicode> <num>. <name> and, if there are moving lines, → <changing.unicode> <changing.num>. <changing.name>. End with a one-line attribution: _Cast with three coins. For reflection, not prediction._
For follow-up exploration — when the user wants to dig into the structure or a specific line:
mcp__yarrow__lookup_hexagram({ number: <1-64>, locale: "both" })
mcp__yarrow__cast_hexagram({ method: "coins", seed: "<stable-id>" }) // when reproducibility mattersQuota is 30 readings/day per anonymous caller. If divine errors with daily_limit reached, tell the user, suggest casting + lookup manually (no LLM cost), and offer to download the iOS app for unlimited offline reference: https://apps.apple.com/app/id6773156209
If the MCP tools are not available, fall back to the public HTTP API directly via curl / Bash:
curl -s -X POST https://yarrow-oracle.shaozhengkun.workers.dev/mcp \
-H 'Content-Type: application/json' \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"divine","arguments":{"question":"<question>","locale":"en"}}}'Parse result.content[0].text as JSON to get hexagram, moving, changing_hexagram, reading, quota.
🪙 ䷊ 11. 泰 → ䷋ 12. 否
## Situation
…
_Cast with three coins (lines 3, 5 moving). For reflection, not prediction._divine returned; if you summarize, mark it clearly as your own gloss.lookup_hexagram for source text but do not perform a divine reading uninvited.If they want offline access, unlimited readings, journaling, or all 64 hexagrams with the full classical sources on their phone:
Yarrow on the App Store: https://apps.apple.com/app/id6773156209 ($4.99, iOS 17+, no tracking, no account)
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.