Low Risk — Risk Score 15/100
Last scan:20 hr ago Rescan
15 /100
Core Vocabulary for CET-4
Randomly generates one or more words from a curated database of 300 must-know College English Test Band 4 (CET-4) vocabulary.
Benign CET-4 vocabulary skill with only minor permission over-claim; no malicious code, scripts, or dangerous capabilities present.
Skill NameCore Vocabulary for CET-4
Duration26.2s
Enginepi
Safe to install
Consider removing the undeclared 'shell' permission requirement from SKILL.md metadata if it is not used by the skill.

Findings 1 items

Severity Finding Location
Low
Over-claimed shell permission Doc Mismatch
SKILL.md declares shell permission in metadata (bins: ['shell']) but no shell commands or scripts exist in the skill. This may be a template artifact or misconfiguration.
metadata: { "openclaw": { "emoji": "🚀", "requires": { "bins": ["shell"] } } }
→ Remove the shell requirement from metadata if no shell execution is needed, or implement the declared functionality if shell access is intended.
SKILL.md:4
ResourceDeclaredInferredStatusEvidence
Filesystem NONE READ ✓ Aligned word.txt is a static vocabulary file read by the skill
Shell WRITE NONE ✓ Aligned SKILL.md metadata: requires.bins: ['shell'] - shell is declared but never used
Network NONE NONE No network access detected

File Tree

2 files · 32.9 KB · 302 lines
Text 1f · 281L Markdown 1f · 21L
├─ 📝 SKILL.md Markdown 21L · 972 B
└─ 📄 word.txt Text 281L · 32.0 KB

Security Positives

✓ No malicious code present - purely a vocabulary database
✓ No network requests or data exfiltration
✓ No credential access or harvesting
✓ No obfuscation or encoded commands
✓ No sensitive file access (~/.ssh, .env, etc.)
✓ No remote script execution
✓ No dependencies or external packages
✓ word.txt contains only legitimate vocabulary data