Geepers Etymology

PassAudited by ClawScan on May 1, 2026.

Overview

The skill is a coherent etymology API lookup helper, with the main caution that it relies on an external API and a user-provided API key.

This appears safe for normal etymology lookups. Before installing, confirm you trust api.dr.eamer.dev, use a dedicated API key where possible, and avoid sending words or research terms that you consider private.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI03: Identity and Privilege Abuse

What this means

Requests may consume quota or access tied to the user's dr.eamer.dev API key.

Why it was flagged

The skill expects a user-provided API key for the external service. This is purpose-aligned for an API integration, but users should treat it as account authority and note that the registry metadata does not declare a primary credential or env var.

Skill content

export DREAMER_API_KEY=your_key_here

Recommendation

Use a dedicated, least-privileged API key if available, avoid pasting secrets into chat, and revoke the key if it is no longer needed.

Note

ASI04: Agentic Supply Chain Vulnerabilities

What this means

Users have less provenance information for deciding whether to trust the external API service.

Why it was flagged

The skill is instruction-only and shows no hidden code, but the registry metadata does not provide a source repository or homepage for verifying the API provider or maintainer.

Skill content

Source: unknown; Homepage: none

Recommendation

Verify the api.dr.eamer.dev service and its privacy/API-key handling expectations before using the skill for sensitive queries.