curriculum-designer
Designs customized curricula for PODs with real resource links, featuring staged implementation and fallback logic for effective learning plans.
Install this skill
Security score
The curriculum-designer skill was audited on May 14, 2026 and we found 25 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 555 | ```bash |
Access to hidden dotfiles in home directory
| 58 | - **API Keys:** Stored locally in `~/.openclaw/workspace/skills/curriculum-designer/.env` (NOT in git) |
Access to hidden dotfiles in home directory
| 60 | - **Checkpoint Directory:** `~/.openclaw/workspace/curriculum-designer-checkpoints/` |
Access to hidden dotfiles in home directory
| 158 | **Checkpoint:** `~/.openclaw/workspace/curriculum-designer-checkpoints/<timestamp>-<session-id>/requirements.json` |
Access to hidden dotfiles in home directory
| 246 | **Checkpoint:** `~/.openclaw/workspace/curriculum-designer-checkpoints/<timestamp>-<session-id>/research-results.json` |
Access to hidden dotfiles in home directory
| 316 | **Checkpoint:** `~/.openclaw/workspace/curriculum-designer-checkpoints/<timestamp>-<session-id>/validated-resources.json` |
Access to hidden dotfiles in home directory
| 488 | **Checkpoint:** `~/.openclaw/workspace/curriculum-designer-checkpoints/<timestamp>-<session-id>/curriculum-structure.json` |
Access to hidden dotfiles in home directory
| 490 | **Also updates:** `~/.openclaw/workspace/curriculum-designer-checkpoints/<timestamp>-<session-id>/research-results.json` (adds curriculum_summary) |
Access to hidden dotfiles in home directory
| 561 | **Checkpoint:** `~/.openclaw/workspace/curriculum-designer-checkpoints/<timestamp>-<session-id>/final-sheet-url.txt` |
Access to hidden dotfiles in home directory
| 642 | 0 0 * * * find ~/.openclaw/workspace/curriculum-designer-checkpoints/ -type d -mtime +7 -exec rm -rf {} \; |
Access to hidden dotfiles in home directory
| 651 | --command "find ~/.openclaw/workspace/curriculum-designer-checkpoints/ -type d -mtime +7 -exec rm -rf {} \;" \ |
Access to hidden dotfiles in home directory
| 682 | find ~/.openclaw/workspace/curriculum-designer-checkpoints/ -type d -mtime +7 -ls |
Access to hidden dotfiles in home directory
| 685 | find ~/.openclaw/workspace/curriculum-designer-checkpoints/ -type d -mtime +7 -exec rm -rf {} \; |
Access to hidden dotfiles in home directory
| 688 | ls ~/.openclaw/workspace/curriculum-designer-checkpoints/ |
Access to .env file
| 58 | - **API Keys:** Stored locally in `~/.openclaw/workspace/skills/curriculum-designer/.env` (NOT in git) |
Access to .env file
| 166 | **API:** Use YouTube Data API v3 with key from `.env` |
Access to .env file
| 619 | ⚠️ **API keys are stored locally in `.env` file - NEVER commit this file to git!** |
External URL reference
| 67 | Get from: https://console.cloud.google.com/apis/credentials |
External URL reference
| 200 | "url": "https://youtube.com/watch?v=ABC123", |
External URL reference
| 258 | https://www.youtube.com/oembed?url=https://youtube.com/watch?v=VIDEO_ID |
External URL reference
| 296 | "url": "https://youtube.com/watch?v=ABC123", |
External URL reference
| 416 | "youtube_link": "https://youtube.com/watch?v=ABC123", |
External URL reference
| 525 | ["1","Digital Literacy","Module 1: Introduction","Understand basic components","Practical exercise","https://youtube.com/watch?v=ABC123","Computer Basics","Computer,Mouse",""], |
External URL reference
| 526 | ["2","Digital Literacy","Module 2: File Management","Learn to organize files","Create folders","https://youtube.com/watch?v=DEF456","File Management","File Explorer",""], |
External URL reference
| 611 | | Curriculum Designer Folder | `https://drive.google.com/drive/folders/1upJQu-IVmZRJQsNGmJNRzq9IwL67MVL9` | |