anki-connect

Warn

Audited by Runlayer on Feb 21, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
1
Flagged
1
Chunks
2
Flagged Files (1)
SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md [1/2] Description: --- name: anki-connect description: This skill is for interacting with Anki through AnkiConnect, and should be used whenever a user asks to interact with Anki, including to read or modify decks, notes, cards, models, media, or sync operations. --- # AnkiConnect ## Overview Enable reliable interaction with Anki through the AnkiConnect local HTTP API. Use this skill to translate user requests into AnkiConnect actions, craft JSON requests, run them via curl/jq (or

Tool: SKILL.md [2/2] Description: `guiEditNote` - `guiAddNoteSetData` - `guiCurrentCard` - `guiStartCardTimer` - `guiShowQuestion` - `guiShowAnswer` - `guiAnswerCard` - `guiUndo` - `guiDeckOverview` - `guiDeckBrowser` - `guiDeckReview` - `guiImportFile` - `guiExitAnki` - `guiCheckDatabase` - `guiPlayAudio` ### Media Actions - `storeMediaFile` - `retrieveMediaFile` - `getMediaFilesNames` - `getMediaDirPath` - `deleteMediaFile` ### Miscellaneous Actions - `requestPermission` - `version` - `apiRefl

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
1
Files Flagged
1
Chunks Analyzed
2
Analyzed
Feb 21, 2026, 10:15 AM
Security Audit — runlayer — anki-connect