Oasyce Vault

Local-first data asset manager — scan, classify, and report on your data before deciding what to share. Use when user mentions scanning files, classifying da...

Security Scan

The skill's instructions align with its stated purpose (a local data scanner) and request no unrelated permissions, but it relies on installing an external PyPI package so you should verify that package before installing.

Purpose & Capability

The name/description (local-first data asset scanner) match the SKILL.md: it tells the agent to install and run a datavault CLI to scan, classify, and report on local files. There are no unrelated env vars, binaries, or config paths requested.

Instruction Scope

Instructions explicitly tell the user/agent to install the datavault package and run commands that read directories and files (scan, classify, report). Reading local files is expected for this purpose, but be aware that the tool will access file contents and metadata during scans. The README warns when not to use it and shows optional registration with Oasyce, but the skill does not itself instruct automatic exfiltration.

Install Mechanism

This is an instruction-only skill (no install spec), but SKILL.md instructs to run `pip install datavault` (and an extra for oasyce). Relying on a third-party PyPI package is a normal choice for Python tools but increases supply-chain risk: the repository/package should be reviewed before installation.

Credentials

No environment variables, credentials, or config paths are requested. The declared requirements match the described functionality (local scanning) and there are no unrelated secrets requested.

Persistence & Privilege

The skill does not request always: true and does not declare persistent system-wide changes. It's user-invocable and agent-autonomous invocation is the platform default; nothing here signals elevated privileges or attempts to modify other skills.

Assessment

This skill is coherent: it tells the agent to install and run a local CLI that scans your files, which is what you'd expect. Before using it, verify the datavault package on PyPI (author, downloads, source code, release page) and install it in a contained environment (virtualenv/container) if possible. Be cautious when scanning sensitive directories (home, cloud sync folders, SSH keys, password stores) and avoid running scans with elevated privileges. If you plan to use the Oasyce registration flow, remember that registering assets may transmit metadata off your machine—confirm where data is sent and what gets uploaded.

DataVault

Know what you have before you decide what to share. Local-first data asset scanner and classifier.

Prerequisites

pip install datavault

Verify: datavault version should print 0.1.0+.

Commands

Scan a directory

datavault scan [path] [--no-recursive]

Scans a directory and categorizes all files (60+ formats recognized):

• Documents, spreadsheets, images, audio, video
• Code, data files, archives, databases

Default: scans current directory recursively.

Classify a single file

datavault classify <file>

Returns category, MIME type, and file size.

Generate a report

datavault report [path] [--format text|json]

Produces a summary report of all data assets found. JSON format available for programmatic use.

When to use this skill

• User wants to know what data they have
• User asks to scan/inventory files or directories
• User wants a data asset report
• User is preparing to register assets on Oasyce (scan first, register later)

When NOT to use this skill

• User wants to register/trade data rights (use oasyce-data-rights)
• User wants to move/delete/organize files (use standard file tools)

Works with Oasyce

DataVault is standalone. When paired with Oasyce, scanned assets can be registered on the decentralized network:

pip install datavault[oasyce]
datavault scan ~/Documents        # See what you have
oasyce register ~/Documents/report.pdf  # Register what matters