Curriculum Generator
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: curriculum-generator Version: 1.0.0 The skill is classified as suspicious due to its extensive and highly emphatic use of prompt injection techniques in SKILL.md, employing phrases like "YOU MUST", "DO NOT SKIP THIS", and "IMMEDIATELY" to strictly control the agent's execution flow. While the immediate objective of these instructions appears to be functional (e.g., ensuring resource links are populated, enforcing time limits, escalating when necessary), such aggressive agent manipulation is a high-risk behavior. Additionally, the skill frequently uses powerful `bash_tool` and `execute_bash` commands to run Python scripts for web searching (e.g., `python3 ~/.openclaw/skills/neo-ddg-search/scripts/search.py`), which, while for a stated purpose, represents a broad capability that could be misused.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing the recommended dependency or packages expands what must be trusted beyond this skill itself.
The skill relies on an external skill and user-installed Python packages that are not part of this instruction-only package.
- **neo-ddg-search skill**: For web searching educational resources - Install: `clawhub install neobotjan2026/neo-ddg-search` ... pip3 install pandas openpyxl
Install those dependencies only from trusted sources, and review the neo-ddg-search skill and package provenance before using them.
Curriculum topics or search terms may be shared with the search provider and visible in debug output.
The skill sends curriculum topics through another skill to an external search service, which is expected for resource discovery but is still an external data flow.
For each topic in the curriculum: 1. Executes DuckDuckGo search via neo-ddg-search 2. Extracts educational URLs from results
Avoid including private student, teacher, or organization details in search terms; use debug mode only when you are comfortable showing search queries and URLs.
POD details, curriculum assumptions, or prior decisions could persist locally and influence later curriculum generation.
The artifact discloses persistent local memory that may store curriculum-related context for future use.
- Local memory storage for continuous improvement ... - **Memory**: `~/.openclaw/skills/curriculum-generator/memory/`
Review or clear the memory folder when information is outdated or sensitive, and avoid storing unnecessary personal data.
Curriculum generation or research work may continue as a background task during normal use.
The README states that the skill supports background task execution, but the artifacts do not show hidden, self-propagating, or autonomous behavior outside the curriculum workflow.
- ✅ Background task execution support
Monitor long-running tasks and stop them if they are no longer needed.