Oasyce Vault

ReviewAudited by ClawScan on May 1, 2026.

Overview

This is a coherent local file-inventory skill, but users should be careful because it can recursively scan local folders and relies on an external Python package.

This skill appears purpose-aligned for local data inventory. Before installing, verify the PyPI package you are installing, run it in a trusted environment, scan only folders you intend to inventory, and review reports before sharing or using the optional Oasyce registration workflow.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the package means trusting code from PyPI outside the reviewed skill artifact.

Why it was flagged

The skill asks the user to install an external Python package, but the artifacts do not pin a version or include the package contents for review.

Skill content
pip install datavault
Recommendation

Install only from the expected PyPI project, consider using a virtual environment, and verify the package/version before running scans.

What this means

A generated data-asset report may reveal sensitive information about local documents or directories if run too broadly or shared later.

Why it was flagged

Recursive local scanning and reporting can create an inventory of private files, names, types, and sizes under the selected path.

Skill content
datavault scan [path] [--no-recursive] ... Default: scans current directory recursively.
Recommendation

Run scans only on intended folders, use --no-recursive when appropriate, and review any generated report before sharing or registering assets elsewhere.