Udemy
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: udemy Version: 1.0.0 The skill bundle consists entirely of markdown documentation and instructional text related to creating and managing Udemy courses. There are no executable files, no external network calls to suspicious domains, and no instructions that could lead to data exfiltration, unauthorized execution, or persistence. Crucially, the `SKILL.md` explicitly includes 'Critical Rules' that forbid the AI agent from automating Udemy uploads, logins, or platform interactions, and mandates human review, which acts as a strong safeguard against misuse. All content is aligned with the stated purpose and lacks any indicators of malicious or suspicious intent, including prompt injection attempts.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Drafted content could affect what students see or buy, so mistakes or policy issues would still be the user's responsibility.
The skill can help prepare public course and management materials, but it explicitly requires manual review and prohibits automated platform actions.
Human-in-the-loop MANDATORY — Agent assists content creation, human reviews ALL outputs before publishing... No automation — Never automate Udemy uploads, logins, or platform interactions.
Review every course description, price, response, and content draft before using it on Udemy, and keep platform actions manual.
Improper or biased review practices could mislead prospective students or violate marketplace rules.
Soliciting early reviews can be legitimate, but reviews from friends or colleagues can affect student trust if they are not genuine, unbiased, and policy-compliant.
Gather early reviewers (friends, colleagues)
Only seek genuine reviews from people who actually evaluated the course, and verify Udemy's current review and promotional policies.
Local course notes could contain private business information or student-related details if the user stores them there.
The suggested local workspace may retain student interactions, reviews, performance metrics, and revenue information across course-management tasks.
qa-log.md # Student questions & responses... reviews.md # Notable reviews & responses... Revenue/mo
Avoid storing unnecessary personal data, keep the workspace private, and remove or anonymize student details when they are no longer needed.