wordpal-个性化专业英语学习助手

• Analyzed: May 11, 2026, 6:52 AM
• Findings: 1
• Version: 3.1.0
• Hash: 384b6a4fc22380cc6d6bde7e348d805eff9cc68f07a80626574aa29497c49028
• Source: palm
• External report: View on VirusTotal

Findings (1)

WordPal is a well-structured English learning skill that implements the FSRS (Free Spaced Repetition Scheduler) algorithm using a local SQLite database (via the built-in node:sqlite module). The code follows security best practices, including input validation in input-guard.js and the use of prepared statements in vocab-db.js to prevent SQL injection. The skill utilizes the agent's local memory files to personalize word selection and the cron capability for study reminders, both of which are consistent with its stated purpose. There is no evidence of data exfiltration, malicious execution, or harmful prompt injection instructions in the SKILL.md or reference files.