Hsk Learning

• Risk level: Low
• Analyzed: Feb 18, 2026, 3:19 PM
• Findings: 0
• Version: 1.0.1

Overview

The skill's code, install steps, and runtime instructions are internally consistent with an HSK-focused spaced-repetition and vocabulary‑analysis tool; it reads/writes local memory and data files (no network calls or unrelated credentials requested).

This skill appears to be what it says: a local HSK learning tool that scans your OpenClaw 'memory' files and keeps a per-user mastery DB. Before installing: - Review scripts/init-mastery-db.js (initialization) to confirm where files are written. - Confirm your installation's memory directory (../memory relative to the skill) is the intended folder and does not contain sensitive data you don't want scanned. - Ensure data/hsk-mastery-db.json and data/user-config.json are included in your .gitignore so personal progress isn't accidentally committed. - If you want stricter containment, run the skill in a sandbox or inspect file writes after init. The package makes no network calls and requests no external credentials, which reduces remote-exfiltration risk.