Oasyce Vault
ReviewAudited by ClawScan on May 1, 2026.
Overview
This is a coherent local file-inventory skill, but users should be careful because it can recursively scan local folders and relies on an external Python package.
This skill appears purpose-aligned for local data inventory. Before installing, verify the PyPI package you are installing, run it in a trusted environment, scan only folders you intend to inventory, and review reports before sharing or using the optional Oasyce registration workflow.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing the package means trusting code from PyPI outside the reviewed skill artifact.
The skill asks the user to install an external Python package, but the artifacts do not pin a version or include the package contents for review.
pip install datavault
Install only from the expected PyPI project, consider using a virtual environment, and verify the package/version before running scans.
A generated data-asset report may reveal sensitive information about local documents or directories if run too broadly or shared later.
Recursive local scanning and reporting can create an inventory of private files, names, types, and sizes under the selected path.
datavault scan [path] [--no-recursive] ... Default: scans current directory recursively.
Run scans only on intended folders, use --no-recursive when appropriate, and review any generated report before sharing or registering assets elsewhere.
