v1.0.0

Duolingo Learning OS

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 6:26 AM.

Analysis

This appears to be a coherent local learning-system skill that stores progress under ~/duolingo/ and optionally provides a routing snippet for the user to apply.

GuidanceThis skill looks safe to install if you want a persistent local learning tracker. Before enabling the optional AGENTS router, check that the trigger topics are specific enough, and remember that progress, mistakes, schedules, and topic profiles will be saved under ~/duolingo/.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Agent Goal Hijack

SeverityLowConfidenceHighStatusNote

activation-routing.md

When user asks to learn, practice, quiz, review, or improve any topic listed in `~/duolingo/router/topics.md`, activate `duolingo`.

The optional router block changes when the skill activates in future conversations. The same file also says to provide the block for the user to paste and to never auto-write AGENTS, making it disclosed and user-controlled.

User impactIf the user installs the router snippet, learning-related prompts may automatically invoke this skill for matching topics.

RecommendationReview the trigger topics before adding the snippet to AGENTS, and keep the trigger list narrow enough to avoid unwanted activations.

Tool Misuse and Exploitation

SeverityInfoConfidenceHighStatusNote

blueprint.md

mkdir -p ~/duolingo/{router,topics,archive}

The skill instructs creation of local folders and baseline files. This is a local filesystem operation, but it is bounded to the declared ~/duolingo/ configuration path and is central to the learning-state workflow.

User impactThe skill will create and update local files for topics, queues, sessions, and progress.

RecommendationInstall only if you are comfortable with the skill maintaining a local ~/duolingo/ folder; review or remove that folder if you stop using it.

Sensitive data protection

Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.

Memory and Context Poisoning

SeverityLowConfidenceHighStatusNote

setup.md

Store this in global memory and apply automatically.

The skill persists learning state, active topics, rotation policy, streaks, queues, and session outcomes for reuse across future lessons. This is purpose-aligned, but users should know the data is retained locally.

User impactYour learning goals, levels, mistakes, progress, and review schedule may remain in local files and shape future sessions.

RecommendationAvoid storing sensitive personal details in lesson topics or notes, and periodically review or delete ~/duolingo/ if you no longer want that history retained.