course-platform-security

82 / 100 · Low risk

Fine to try. Some of what it can do is expected: a security skill usually runs scanners and checks websites.

By jiayaoqijia/cryptoskill (GitHub) · security · 81 stars · scanned at commit 0dc9f60

Audits course-selling / e-learning platforms for domain-specific security — catalog gating truth (draft/unpublished/private course exposure to public), preview-vs-full-content leaks, enrollment state machines (free enrollment without paid order), cohort/multi-cohort access control (student of cohort A reading cohort B), and persona-driven route checks (admin-only surfaces reachable by public/student). Use when the project sells or gates digital courses/content — look for courses, lessons, enrol…

Works with any agent that supports SKILL.md skills.

Partially scanned — some files couldn't be read; we'll retry on the next scan

What this skill can do

Runs commands on your computer

This is disclosed by the author in the skill's SKILL.md or README. Expected for a security skill.

Found in 6 places.

skills/chains/ashrafiucse-course-platform-security/SKILL.md, line 15rg -n -i "course|lesson|module|enrollment|cohort|preview|curriculum|subscription" -g '**/models/**' -g '**/entities/**' -g '*.prisma' -g 'schema*' | head -25
skills/chains/ashrafiucse-course-platform-security/SKILL.md, line 27rg -n "courses?\.(find|where|all|select)" -g '*.js' -g '*.ts' -g '*.py' -g '*.rb' # census: disposition every read path
skills/chains/ashrafiucse-course-platform-security/SKILL.md, line 40rg -n -i "preview|sample|trial|first.?lesson" -g '*controller*' -g '*routes*' -g '*resolver*' | head

Show 3 more

skills/chains/ashrafiucse-course-platform-security/SKILL.md, line 53rg -n -i "enrollment.*(create|insert|save)|grant.*access" -g '*.js' -g '*.py' | head
skills/chains/ashrafiucse-course-platform-security/SKILL.md, line 66rg -n -i "cohort|batch|class_?id|group_?id" -g '*.js' -g '*.py' -g '*.rb' # census: disposition every cohort-touching read
skills/chains/ashrafiucse-course-platform-security/SKILL.md, line 78rg -n -i "admin|manage|catalog|publish|price|coupon" -g '*routes*' -g '*controller*' | head

Downloads and installs other software

The author does not mention this.

Found in 1 place.

skills/chains/ashrafiucse-course-platform-security/TRUST.auto.yaml, line 77- 'scan: no curl|sh / wget|sh pattern matched'

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'course-platform-security' ] || [ -L ~/.agents/skills/'course-platform-security' ]; then echo 'A skill folder named course-platform-security already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/jiayaoqijia/cryptoskill' "$d" && git -C "$d" checkout --quiet '0dc9f60ab1f3fcae24da49c4cef09c46c589f903' -- 'skills/chains/ashrafiucse-course-platform-security' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/chains/ashrafiucse-course-platform-security' ~/.agents/skills/'course-platform-security' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'course-platform-security' ~/.claude/skills/'course-platform-security' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for jiayaoqijia/cryptoskill shows the score of its lowest-scoring skill.

SkillTrust badge for jiayaoqijia/cryptoskill

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/jiayaoqijia/cryptoskill.svg)](https://zalavijaysinh.github.io/skilltrust/repos/jiayaoqijia/cryptoskill/)

Score history

Date	Version	Score
2026-11-13	`0dc9f60`	82
2026-11-09	`edd8f75`	97
2026-11-07	`36a85d8`	100