Ferpa
v1.0.0FERPA compliance reference — student records privacy, educational rights, consent requirements, and institutional obligations under the Family Educational Ri...
⭐ 0· 100·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description describe a FERPA reference and the skill provides a local shell script (scripts/script.sh) with commands that print FERPA guidance. There are no unrelated env vars, binaries, or install steps requested.
Instruction Scope
SKILL.md instructs the agent to run scripts/script.sh with specific subcommands (intro, rights, records, etc.). The script content shown prints static guidance and matches the described scope. The skill does not request reading unrelated system files or external endpoints in the visible code.
Install Mechanism
No install spec is present (instruction-only with a bundled script). That is the lowest-risk pattern; nothing is downloaded from external URLs or installed globally.
Credentials
No credentials or sensitive environment variables are required. SKILL.md exposes an optional FERPA_DIR configuration (a local data directory), which is proportionate for storing local skill data if used.
Persistence & Privilege
The skill is not always-enabled, does not request elevated privileges, and does not modify other skills or system-wide configuration in the materials provided.
Assessment
This skill appears coherent and limited: it runs a bundled Bash script that prints FERPA guidance. Before installing or running, inspect the full scripts/script.sh yourself to confirm it contains only static text output (no network calls, no file-system traversal beyond writing to an intended FERPA_DIR, and no commands that exec arbitrary input). If you will run the script in an automated agent, consider running it in a restricted environment (container or VM) first. If you need the skill to store data, verify what FERPA_DIR is used for and ensure it does not inadvertently store or transmit student data. If you want higher assurance, provide the complete script output (the truncated portion) so it can be re-reviewed; that could raise confidence to high if it contains only help/version/printing logic.Like a lobster shell, security has layers — review code before you run it.
latestvk97cs70z783yryew0hkeexhzf583bxap
License
MIT-0
Free to use, modify, and redistribute. No attribution required.