voc
PassAudited by ClawScan on May 1, 2026.
Overview
This appears to be a benign placeholder vocabulary-learning skill; its only notable authority is a disclosed ability to run its included shell helper, which only prints informational placeholder text.
This version looks safe and minimal. The main thing to notice is that it requests exec permission for its included shell script; the reviewed script only displays placeholder vocabulary-skill information, but you should re-check permissions and behavior if future releases add real deck management, progress tracking, audio, network, or account features.
Findings (1)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing the skill allows it to run its helper script when invoked, but the included script does not show sensitive access or harmful behavior.
This shows the skill can execute an included local script. In the reviewed artifacts, that script is purpose-aligned and only prints informational placeholder output, so this is a user-noticeable permission rather than a concern.
The skill requires `exec` permission to run its helper script.
Install only if you are comfortable granting exec permission for this simple helper script; review future versions if they add real vocabulary, stats, or network functionality.