Environment variable access combined with network send.
Critical
- Code
- suspicious.env_credential_access
- Location
- examples/node-flashcards.mjs:13
Security audit
Vocab Voyage Mcp V1.1.1
Security checks across malware telemetry and agentic risk
Overview
This is a coherent hosted vocabulary-practice skill, but personalized features use an optional account token and store study progress.
This skill appears purpose-aligned for vocabulary practice. Before enabling personalized features, understand that your token lets the hosted Vocab Voyage service read and update your study progress; use anonymous mode for public definitions/quizzes if you do not want account-linked tracking.
VirusTotal
67/67 vendors flagged this skill as clean.
Static analysis
Detected: suspicious.env_credential_access