Daily Brain
v1.0.0每日脑力训练 — 逻辑推理、数学速算、记忆挑战、文字谜题，游戏化精美卡片呈现， 含难度自适应分级和连续打卡追踪。每天一道精选题目锻炼大脑，保持思维敏锐。 Daily brain training: logic puzzles, math speed drills, memory challenges, and w...
⭐ 0· 67·0 current·0 all-time
byCosmos Fang@cosmofang
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the implementation: puzzles are embedded in data/puzzles.json; scripts produce today's puzzle, accept answers, update local progress, and render HTML card instructions. The node >=18 requirement declared in SKILL.md aligns with the provided JavaScript files.
Instruction Scope
SKILL.md explicitly states no networking or credential access; the scripts follow that and only read/write files under the skill's data directory. Minor content inconsistencies exist in the data: e.g., puzzle L001 lists 'answer': 'B' but has 'correctedAnswer': 'A' (the code prefers correctedAnswer when present). This is a data correctness issue, not a security concern.
Install Mechanism
No install spec; skill is instruction-only with local JS files. No downloads, package installs, or archive extraction occur. The recommended manual install (copy into skills dir) is low-risk and consistent with the skill's declared behavior.
Credentials
The skill requests no environment variables or credentials and does not access system config paths. Its only persistent data is data/progress.json inside the skill; that is proportionate to a local progress-tracking puzzle skill.
Persistence & Privilege
The skill writes only a single local file (data/progress.json) and documents its uninstall path. always:false and normal autonomous invocation are set. It does not request elevated privileges, modify other skills, nor write outside its own directory.
Assessment
This skill appears to do what it claims: present daily puzzles from an embedded DB and store progress locally. Before installing, ensure you have Node.js (>=18) available and that you are comfortable with a local file (data/progress.json) storing your progress unencrypted. Review the small JS files if you want assurance (they contain no network calls or secret access). Note the puzzle-data minor inconsistency (L001 has conflicting answer fields) — that's a correctness/UX issue, not a security issue. If you prefer extra safety, run the skill in a restricted environment or container, or back up/delete data/progress.json before/after use.Like a lobster shell, security has layers — review code before you run it.
latestvk970jg0zt9vmdq3kt5kh9vaf1n84pqn7
License
MIT-0
Free to use, modify, and redistribute. No attribution required.