french-tutor
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The README provides instructions to install the skill via
npxfrom a vendor-owned scope (HartreeWorks/skill--french-tutor) and references a Node.js installation guide in a HartreeWorks GitHub repository. These are documented as trusted vendor resources. - [COMMAND_EXECUTION]: The skill executes a Python script (
~/.claude/skills/mochi-srs/scripts/mochi_api.py) to interface with the Mochi-SRS application for flashcard creation. This is a local script interaction based on explicit user approval. - [DATA_EXPOSURE]: The skill reads and writes to a local state file (
~/.claude/skills/french-tutor/data/state.json) to track user vocabulary and common mistakes. This is a standard state-tracking mechanism for the skill's primary purpose.
Audit Metadata