Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Learn Anything
v1.1.0Create personalized learning paths, find curated resources, summarize key concepts, generate quizzes, and track progress for effective topic mastery.
⭐ 0· 62·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name/description match the included materials: learning-path templates, learning-method references, and a quiz generator. However, SKILL.md references scripts (scripts/track-progress.py) and a reference (references/quiz-templates.md) that are not present in the file manifest — that mismatch suggests incomplete packaging or sloppy documentation.
Instruction Scope
Instructions are scoped to generating learning paths, summaries, quizzes, and tracking progress. They instruct tracking progress in learning-journal.md and reference scripts for tracking; the only included script is generate-quiz.py which is benign and operates locally. The skill does not instruct reading unrelated system files or sending data to external endpoints, but the implicit file writes/reads (learning-journal.md) are not declared in requires.config and could have privacy implications if an agent writes to user files without the user's explicit consent.
Install Mechanism
No install spec (instruction-only with one helper script). No downloads or external installers are included — low installation risk.
Credentials
The skill requests no environment variables, no credentials, and no config paths. This is proportionate to the stated offline, 100% free functionality.
Persistence & Privilege
always is false and model invocation is allowed (default). The skill does not request permanent presence or modify other skills. The only persistence implied is writing a learning-journal.md file, which is within scope but should be made explicit.
What to consider before installing
This skill otherwise looks coherent and low-risk (no network calls, no secrets requested, included quiz generator is local and readable). Before installing or running it: 1) note that SKILL.md mentions scripts/files that are missing (scripts/track-progress.py and references/quiz-templates.md) — ask the author or inspect an updated package so you know how progress tracking is implemented; 2) be aware the skill suggests writing/maintaining a learning-journal.md in your workspace — confirm where that file will be created and whether you want the agent to write to it; 3) inspect any added scripts (if provided later) for network or credential use before granting filesystem or agent autonomy; and 4) if you require strict isolation, run the skill in an environment where file writes are confined (e.g., a dedicated directory) or request the missing tracking script/source from the publisher. If those incongruities are resolved (provide the missing files and confirm no network/credential usage), this skill would be coherent and low-risk.Like a lobster shell, security has layers — review code before you run it.
latestvk9759srf4e6385fenkbv0jvcps83thf7
License
MIT-0
Free to use, modify, and redistribute. No attribution required.