Skip to content
skillsafebeta
← Report library
Purpose / Other

Recipe Create Classroom Course Skill Security Audit

What the author says it does (original text)

Create a Google Classroom course and invite students.

Independent security check

Security risks found

Files checked
1
Risks found
1
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.No risks found
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.No risks found
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.No risks found
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.Risks found: 1
Medium risk

Hard-coded example values can create the wrong course and invite an unintended recipient

Source references: 3
What we found

The executable steps directly use fixed course details and `student@school.edu`. They do not require replacement with a user-confirmed course ID, course details, and student address, or establish a confirmation point before external writes.

Why this matters

If an agent treats the commands as ready to run, an unintended course may be added to the current Google Classroom account and an invitation sent to the wrong address. The recipient may learn that the course exists and gain student access after accepting.

These are execution steps, not a warning or test. Line 24 can directly create a real “Introduction to CS” course under the authorized account, so copying it unchanged would persist the sample attributes. Line 25 sends an invitation, although `COURSE_ID` and the address are evident placeholders, so it would usually fail; if they happen to resolve, it could modify the wrong course or contact an unintended account. The source has no checkpoint to show and confirm final values before either write. Users can require mandatory substitution and confirmation of course details, course ID, and recipient.

SKILL.md:24In the instructionsOpen original file
1. Create the course: `gws classroom courses create --json '{"name": "Introduction to CS", "section": "Period 1", "room": "Room 101", "ownerId": "me"}'`2. Invite a student: `gws classroom invitations create --json '{"courseId": "COURSE_ID", "userId": "student@school.edu", "role": "STUDENT"}'`3. List enrolled students: `gws classroom courses students list --params '{"courseId": "COURSE_ID"}' --format table`
Show 2 other places
SKILL.md:20In the instructionsOpen original file
Create a Google Classroom course and invite students.
SKILL.md:25In the instructionsOpen original file
1. Create the course: `gws classroom courses create --json '{"name": "Introduction to CS", "section": "Period 1", "room": "Room 101", "ownerId": "me"}'`2. Invite a student: `gws classroom invitations create --json '{"courseId": "COURSE_ID", "userId": "student@school.edu", "role": "STUDENT"}'`3. List enrolled students: `gws classroom courses students list --params '{"courseId": "COURSE_ID"}' --format table`
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.No risks found
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.No risks found

Inside this skill

1 instruction sections

The Skill requires an authenticated Google Workspace CLI and the Classroom integration, so its effects depend on the Classroom permissions already held by the current account.

View source
SKILL.md:9In the instructionsOpen original file
    domain: "education"    requires:      bins:        - gws      skills:        - gws-classroom---

The workflow creates an “Introduction to CS” course and assigns the current user as its owner.

View source
SKILL.md:24In the instructionsOpen original file
1. Create the course: `gws classroom courses create --json '{"name": "Introduction to CS", "section": "Period 1", "room": "Room 101", "ownerId": "me"}'`2. Invite a student: `gws classroom invitations create --json '{"courseId": "COURSE_ID", "userId": "student@school.edu", "role": "STUDENT"}'`

The workflow then sends a student invitation to a specified email address and queries enrolled students; it is not a read-only workflow.

View source
SKILL.md:25In the instructionsOpen original file
1. Create the course: `gws classroom courses create --json '{"name": "Introduction to CS", "section": "Period 1", "room": "Room 101", "ownerId": "me"}'`2. Invite a student: `gws classroom invitations create --json '{"courseId": "COURSE_ID", "userId": "student@school.edu", "role": "STUDENT"}'`3. List enrolled students: `gws classroom courses students list --params '{"courseId": "COURSE_ID"}' --format table`
Start here · InstructionsSKILL.md
recipe-create-classroom-course
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions
Lines read
28
File checksum (to compare versions)
921fd83aac2111861c9f8830031c76c15a535e5add23510bec5fd7dc22f40ced