ClawHub

Study Buddy

v1.1.0

When user asks to study, create flashcards, take a quiz, make notes, revise, set study timer, track study hours, create study plan, explain a topic, test kno...

⭐ 3· 729·7 current·7 all-time
byManish Pareek@mkpareek0315
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (study partner, flashcards, quizzes, timers, stats) matches the runtime instructions which create and manage local files under ~/.openclaw/study-buddy. No unrelated credentials, cloud services, or unrelated binaries are requested.
ℹ
Instruction Scope
Runtime instructions are narrowly scoped to creating a data directory and reading/writing JSON files in ~/.openclaw/study-buddy and driving flashcard/quiz logic. One minor inconsistency: the SKILL.md text states 'exec' is needed to run mkdir, but the embedded metadata only lists 'read' and 'write' tools; this is an implementation/metadata mismatch but not inherently malicious.
✓
Install Mechanism
No install spec and no code files — instruction-only skill. Lowest-risk install surface: nothing is downloaded or written by an installer beyond the runtime-created local data files.
✓
Credentials
The skill declares no environment variables, no credentials, and only local file access. The requested permissions (read/write of local storage) are proportional to the stated functionality.
✓
Persistence & Privilege
always:false and user-invocable; the skill does not request permanent/global presence. It writes only to its own directory and does not alter other skills or system-wide configuration.
Assessment
This skill appears coherent and limited to local storage, but consider these practical checks before installing: 1) Verify you trust the skill source since it will create and store files under ~/.openclaw/study-buddy; review those files if you want to confirm no unexpected data is stored. 2) Confirm your agent/platform enforces the claimed network restrictions (the SKILL.md says 'no network', but runtime enforcement depends on the platform). 3) Note the small metadata mismatch: SKILL.md mentions using exec (mkdir) while metadata lists only read/write — ask the author to clarify required permissions. 4) If you keep sensitive material, consider using the skill in a sandbox or backup the directory periodically.

Like a lobster shell, security has layers — review code before you run it.

latestvk97c91pyrc933z44hntmnqy9zd81nvrq

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📚 Clawdis

Comments