FlashForge AI Flashcard Generator
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This appears to be a benign flashcard tool, with the main thing to know being that it saves your flashcards locally.
Before installing, be aware that flashcards and review progress are saved locally in a JSON deck file. This is expected for a flashcard app, but avoid using highly sensitive notes unless you are comfortable managing that local file.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Private notes turned into flashcards may be stored locally until the user deletes or manages the deck file.
The code persists flashcards and review data to a local JSON file, so content derived from pasted notes can remain on the user's filesystem.
this.deckFile = options.deckFile || './flashcards.json'; ... fs.writeFileSync(this.deckFile, JSON.stringify(this.deck, null, 2));
Only paste sensitive material if local storage is acceptable, and manage or delete the flashcards.json file when no longer needed.