Comprehensive AI programming tutor for all levels. Teaches programming through interactive lessons, code review, debugging guidance, algorithm practice, proj...
Security Analysis
medium confidenceThe skill's requested resources and runtime instructions are consistent with a programming-tutor description and it is instruction-only (no installs, no credentials), though minor transparency issues (no source/homepage and a reference to optional Python scripts that aren't included) reduce confidence.
The name/description (programming tutor, code review, debugging, algorithm practice) matches the SKILL.md instructions. Minor inconsistency: the header says "Requires Python 3.8+ for optional script functionality" but there are no code files or install steps in the package. That is plausibly benign (scripts could be optional and hosted elsewhere) but it's a transparency gap the user may want clarified.
SKILL.md contains user-facing lesson and review workflows (asks users to paste code or reference files, select experience/goals, switch teaching modes). It does not instruct the agent to read arbitrary system paths, environment variables, or exfiltrate data. Asking the user to 'reference a file' implies the user should provide content; it does not mandate reading system files on its own.
No install spec and no code files — instruction-only skill. This is the lowest-risk install posture: nothing will be downloaded or written to disk by the skill itself.
The skill declares no required environment variables, credentials, or config paths. The functionality described (teaching, reviewing pasted code) does not justify additional credentials, so the absence of requested secrets is proportionate.
always:false (default) and no indications the skill modifies other skills or system-wide settings. The skill can be invoked autonomously by the agent (platform default) — reasonable for an interactive tutor — and does not request permanent elevated privileges.
Guidance
This skill appears coherent with its stated purpose and is low-risk because it is instruction-only and requests no credentials. Before installing, consider: (1) the package has no public source or homepage — if provenance matters, ask the publisher for a repository or contact info; (2) the SKILL.md mentions optional Python scripts but none are included — ask where they live and whether running them is required; (3) avoid pasting any secret keys, passwords, or private files into the skill when requesting code review or debugging; (4) if you plan to let the agent act autonomously with this skill, remember it could ask users to supply code or run commands — prefer sandboxed environments when testing. If you want higher assurance, request the skill's source code or a trusted origin before enabling it broadly.
Latest Release
v1.0.0
Initial public release of Code Mentor — an interactive AI programming tutor. - Offers guided learning, code review, debugging, algorithm practice, project mentoring, and design pattern exploration. - Supports Python and JavaScript. - Adapts to all experience levels and preferred learning styles. - Includes 8 specialized teaching modes (concept learning, code review, debugging, algorithm practice, etc.). - Provides environment setup guidance for learners.
More by @alvisdunlop
Published by @alvisdunlop on ClawHub
