Anki Connect

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may make lasting changes to your Anki collection when you ask it to manage cards or decks.

Why it was flagged

The skill explicitly authorizes Anki data management actions, including persistent mutations, which are expected for the purpose but should remain user-directed.

Skill content
Use when the user wants to create, update, search, or manage Anki cards, decks, notes, or models.
Recommendation

Review any proposed create, update, or management actions before allowing them, especially bulk changes.

What this means

Installing or configuring the separate AnkiConnect plugin is outside this skill and affects what local Anki access is available.

Why it was flagged

The skill depends on a separate plugin and external documentation rather than bundling installable code; this is normal for AnkiConnect but leaves plugin provenance to the user.

Skill content
Requires Anki running with the AnkiConnect plugin installed... refer to the AnkiConnect documentation: https://git.sr.ht/~foosoft/anki-connect/blob/master/README.md
Recommendation

Install AnkiConnect only from the official or trusted source and understand its local API exposure before using this skill.