Voku Language
v0.1.1Learn and use Voku, a constructed language for AI-agent communication with zero ambiguity, total regularity, and mandatory epistemic marking. Use when transl...
⭐ 0· 604·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The stated purpose (teach/translate a constructed language) is reasonable and requires little in the way of credentials or external access. However the SKILL.md advertises many local resource files (grammar/, lexicon/, learning/, tools/translator/cli.py) and a translator CLI; those resources are missing from the published bundle. Claiming runnable tooling and large local corpora without including them is an inconsistency.
Instruction Scope
The instructions tell the agent to 'read files in this order' and to run a Python translator script (tools/translator/cli.py). Because the skill bundle contains only SKILL.md, these instructions cannot be satisfied as-is and could lead an agent to attempt to locate files elsewhere on disk or over the network. The instructions do not explicitly direct access to system-level paths or secrets, but they do reference many repo-local paths that are absent — that's scope/integrity drift that could cause unexpected behavior.
Install Mechanism
There is no install spec (instruction-only), which is low risk in general. But the SKILL.md still expects a Python 3 CLI tool (and claims 'Zero external dependencies') while not listing Python as a required binary. The absence of files or an install step for the translator means the claimed tooling cannot be verified or run.
Credentials
The skill requests no environment variables, no credentials, and no config paths — that is proportional to a language/translation skill and reduces credential-exfiltration risk.
Persistence & Privilege
The skill does not request 'always: true' and uses default invocation settings (user-invocable, autonomous invocation allowed). This is normal for skills and not problematic by itself, and the skill does not attempt to modify other skills or system-wide settings.
What to consider before installing
Do not install or rely on this skill until the author fixes the missing assets. Specific things to ask or confirm with the publisher: 1) Provide the referenced files (grammar/, lexicon/, learning/..., lexicon/dictionary.md) and include the translator script/tools with a clear install method, or remove references to them. 2) If the translator CLI will be executed, supply its source and a reproducible install (or a vetted package) and confirm it won't read arbitrary host files. 3) Clarify whether Python 3 is required and add 'requires binaries' if so. 4) Prefer releases hosted where you can inspect them (GitHub repo or similar) rather than an opaque bundle. The skill currently contains only documentation and is inconsistent about runnable tools — that mismatch is why it's flagged as suspicious.Like a lobster shell, security has layers — review code before you run it.
latestvk977drk58s3b1dk17erg26ykxd81e98h
License
MIT-0
Free to use, modify, and redistribute. No attribution required.