Daily English
v1.0.0Provides daily English vocabulary, sentences, grammar practice with spaced repetition, quizzes, progress tracking, and streak management from A1-B2 levels.
⭐ 0· 58·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the code and files: word bank, SRS, daily push, quiz, progress, and push management. Required env/config/credentials are none and requested file access (data/users, data/wordbank.json) is appropriate for the stated purpose.
Instruction Scope
SKILL.md and scripts instruct only local operations (register, daily-push, quiz, progress, push-toggle). Scripts read/write user profiles under data/users and use a local wordbank; they do not attempt to read unrelated system files or environment variables, nor do they exfiltrate data to external endpoints.
Install Mechanism
No install spec (instruction-only) — lowest install risk. However, the package includes Node scripts and data (so it is not purely prose). The scripts claim to use only Node built-ins (fs/path) and package.json lists no external dependencies, which is proportionate for the task.
Credentials
No environment variables, secrets, or external credentials are requested. All required data is stored locally. The number and type of permissions (filesystem write/read under data/) are appropriate for a learning/tracking skill.
Persistence & Privilege
always:false (no forced global inclusion). The push-toggle script emits marker lines (__OPENCLAW_CRON_ADD__/__OPENCLAW_CRON_RM__) intended for the platform to add/remove scheduled cron jobs; enabling push will create a platform-scheduled job that periodically runs the local daily-push script. This is expected for push functionality but means enabling push grants the skill a persistent scheduled presence via the platform scheduler.
Assessment
This skill appears coherent and limited to local operations: it stores profiles in data/users, uses an internal wordbank, and only uses Node built-ins. The only persistent side-effect is the scheduling marker it prints when you run push-toggle on — that is how the platform adds a daily cron job to run daily-push; if you don't want scheduled messages, don't run push-toggle on. If you install/run it, run under a Node >=18 environment and review or back up data/users if you care about stored progress. If you are concerned about automated scheduling, inspect any platform cron entries created and remove them when you want to stop pushes.Like a lobster shell, security has layers — review code before you run it.
latestvk9737tvxsr35xfpve5mwytybw983z7nx
License
MIT-0
Free to use, modify, and redistribute. No attribution required.