Kindergarten Assistant
v1.0.0Early childhood educator specializing in British EYFS framework and Reggio Emilia pedagogy for ages 45 days to 2 years. Designs child-led activities, tracks...
⭐ 0· 463·3 current·4 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description (early childhood educator for 45 days–2 years) match the provided files and instructions. Required resources are minimal (no binaries, no env vars, no installs) and are proportionate to a planning/observation assistant.
Instruction Scope
SKILL.md and AGENT.md instruct the agent to design activities, track observations, and 'maintain a memory file' containing child profiles, photos, parental communications, and developmental notes. This behavior is within the described purpose, but the instructions imply collecting and persisting personally identifying and sensitive information (names, ages, photos, parental feedback) without specifying consent, retention, or access controls.
Install Mechanism
No install spec and no code files that would be downloaded or executed. Instruction-only skills are lower-risk from an installation/execution standpoint.
Credentials
The skill requests no credentials or environment access (which is appropriate), but it does expect persistent storage of potentially sensitive child and family data. The lack of declared endpoints or storage mechanisms means data handling is determined by the host agent environment — this is a privacy risk rather than a direct permission mismatch.
Persistence & Privilege
always:false (normal). The skill explicitly references maintaining a memory file (MEMORY.md pattern) and so will result in persistent data kept by the host agent. Autonomous invocation is allowed by default (not itself a problem) — combine this with persistent PII storage and you should review retention, access controls, and whether autonomous runs could expose or transmit data.
Assessment
This skill appears to do what it says, but it intends to collect and store child profiles, observations, photos, and parental communications. Before installing: 1) Confirm where the agent stores memory and who can access it (encrypt or restrict access if possible). 2) Avoid storing full names, contact details, or identifiable photos unless you have explicit parental consent and a clear retention policy. 3) If required by local law (GDPR, COPPA, etc.), ensure compliance and document consent. 4) Consider disabling autonomous invocation or limiting the skill's ability to transmit data externally until you verify the host’s data-handling practices. 5) Regularly review and purge sensitive entries from the skill memory according to your data-retention rules.Like a lobster shell, security has layers — review code before you run it.
latestvk97bwnhcry9km2vqdh3fhfv4pd822bxd
License
MIT-0
Free to use, modify, and redistribute. No attribution required.