Skills/ClawHub/english-memory-method

english-memory-method@0.1.0

CAUTION· install only

Publisher claims: "英语篇章背诵法 v2.2.0：结构骨架图、关键词链式化（问题链/电影法/轨道法）、复述五级阶梯、三遍法、艾宾浩斯间隔复习、记忆钩子、复述技巧包、专业词汇标记与梳理、挖空自测，并交付 SVG 结构图与自包含 HTML 背诵方案（含逐句翻译与全现象连读标注，翻译默认中文可传参换语种）。当用户给出一段或多段英文文章（议论文/说明文/叙事文等）并要求"背诵方法/记忆技巧/帮我背/出背诵方案/和上面一样的记忆技巧"时使用；也适用于任何需要把英文段落快速记牢的学习场景。" Observed in sandbox: sends data to cdn.jsdelivr.net.

Registry ClawHubPublisher yxdwind · publishing for 59 daysInstalls 310Last detonated 7d ago
What would fix thisWatchDispute verdict

Coverage

Install scripts ran; no agent task scenario for this bundle.
Tested
install scripts, with decoy credentials in place · second launch with the clock 45 days ahead · every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios; install scripts ran; no agent task scenario for this bundle) on 2026-11-07 and scored it 51/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Pipe-to-shell pattern; Pipe-to-shell pattern; Direct script execution from GitHub raw URL. Summary: sends data to cdn.jsdelivr.net.

Behavior trace

Honeypot run · 0 s · 2 scenarios
t+CategoryObserved action
0.1snetworkCONNECT https://raw.githubusercontent.com · undeclared
0.1snetworkCONNECT https://cdn.jsdelivr.net · undeclared
0.1sprocessexec /usr/bin/mkdir
0.1sprocessexec /usr/bin/dirname
0.1sprocessexec /usr/bin/curl
0.1sprocessexited 1: [FAIL] SKILL.md (all sources)
0.1sprocessscript backend runs setup only
0.1sprocessscript backend runs setup only
0.1sprocesssecond launch, clock +45 days, CI unset
0.2snetworkCONNECT https://raw.githubusercontent.com · undeclared
0.2snetworkCONNECT https://cdn.jsdelivr.net · undeclared
0.2sprocessexec /usr/bin/faketime
0.2sprocessexec /usr/bin/dirname
0.2sprocessexec /usr/bin/mkdir
0.2sprocessexec /usr/bin/curl
0.2sprocessexited 1: [FAIL] SKILL.md (all sources)

Static findings

CRITICAL
Pipe-to-shell patterninstall.sh:5 · Pipe-to-shell pattern — downloads and immediately executes remote code# curl -fsSL https://raw.githubusercontent.com/yxdwind/english-memory-method/main/install.sh | bashFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST06
HIGH
Pipe-to-shell patternplatforms/gemini/GEMINI.md:33 · Pipe-to-shell pattern — downloads and immediately executes remote code> macOS/Linux: `curl -fsSL https://raw.githubusercontent.com/yxdwind/english-memory-method/main/install.sh | bash`Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST06
HIGH
Direct script execution from GitHub raw URLinstall.sh:5 · Direct script execution from GitHub raw URL — unverified code source# curl -fsSL https://raw.githubusercontent.com/yxdwind/english-memory-method/main/install.sh | bashFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagebin/install.mjs:4 · npx invocation of non-well-known package — may execute untrusted code// npx english-memory-method # install to EVERY detected agent platformFix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
Direct script execution from GitHub raw URLplatforms/gemini/GEMINI.md:33 · Direct script execution from GitHub raw URL — unverified code source> macOS/Linux: `curl -fsSL https://raw.githubusercontent.com/yxdwind/english-memory-method/main/install.sh | bash`Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagebin/install.mjs:5 · npx invocation of non-well-known package — may execute untrusted code// npx english-memory-method claude,codex # install to specific platformsFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
Remote installer piped to shellplatforms/gemini/GEMINI.md:33 · Remote installer piped to shell> macOS/Linux: `curl -fsSL https://raw.githubusercontent.com/yxdwind/english-memory-method/main/install.sh | bash`Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST07
MEDIUM
npx invocation of non-well-known packagebin/install.mjs:6 · npx invocation of non-well-known package — may execute untrusted code// npx english-memory-method --target /path/to/skillsFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
Remote installer piped to shellinstall.sh:5 · Remote installer piped to shell# curl -fsSL https://raw.githubusercontent.com/yxdwind/english-memory-method/main/install.sh | bashFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST07
MEDIUM
npx invocation of non-well-known packagebin/install.mjs:75 · npx invocation of non-well-known package — may execute untrusted codeconsole.error("No valid target. Usage: npx english-memory-method [alias,alias | --target <dir>]");Fix: Pin versions and sources; vendor anything fetched at install time.
AST06

Cost to the agent

Instructions loaded
≈3,073 tok
3 files · 26 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

29 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Contacts a host you did not declare≈ +23 on the totalList every host you talk to in SKILL.md frontmatter (`network: [api.example.com]`), or stop contacting the ones you cannot justify.
  2. Pipe-to-shell pattern≈ +9 on the totalBuild commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
  3. Unclaimed publisher≈ +8 on the totalClaim yxdwind: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  4. Direct script execution from GitHub raw URL≈ +4 on the totalPin versions and sources; vendor anything fetched at install time.
  5. npx invocation of non-well-known package≈ +2 on the totalPin versions and sources; vendor anything fetched at install time.
  6. Remote installer piped to shell≈ +2 on the totalBuild commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim yxdwindPropose a patch to the maintainer