v1.0.0

英语打卡（每日学习每日练）

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 7:17 AM.

Analysis

This appears to be a simple English learning check-in helper, with the main thing to notice being that it runs a separately installed learning-checkin script and stores small local progress files.

GuidanceBefore installing, make sure you trust the separate learning-checkin skill/script this tool depends on, and expect it to keep small local progress files in its data directory. The provided artifacts do not show credential use, network exfiltration, or destructive actions.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Agentic Supply Chain Vulnerabilities

SeverityLowConfidenceHighStatusNote

SKILL.md

本 Skill 依赖 [learning-checkin](https://clawhub.ai/daizongyu/learning-checkin)，需要先安装该 Skill。

The skill clearly discloses that it relies on another skill/script that is not included in this package, so users should ensure that dependency is trusted and installed from the intended source.

User impactIf the dependency path points to an untrusted or altered script, this skill will run that external code during check-in actions.

RecommendationInstall learning-checkin only from a trusted source and verify the path supplied through --learning-checkin-path or LEARNING_CHECKIN_PATH.

Sensitive data protection

Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.

Memory and Context Poisoning

SeverityInfoConfidenceHighStatusNote

english_checkin.py

CONFIG_FILE = DATA_DIR / "config.json"
QUOTES_USED_FILE = DATA_DIR / "quotes_used.json"

The skill uses persistent local JSON files to remember configuration and previously used quote identifiers across runs.

User impactThe skill will retain limited local learning state, such as learning type, check-in timestamp, and quote history, between sessions.

RecommendationReview or delete the files under the skill's data directory if you do not want this local progress information retained.