claude-code-tutor
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill manages student progress by reading from and writing to a local JSON file located at
~/.claude-code-tutor-progress.jsonusing standard shell commands (cat,echo). - [EXTERNAL_DOWNLOADS]: The curriculum recommends that users install helpful community skills using
npx skills add, specifically mentioning therecallskill from thearjunkmrm/recallGitHub repository and a Python development skill from the author's own repository (pengelbrecht/skills). - [DATA_EXFILTRATION]: The tutorial modules provide guidance on using browser automation tools like
agent-browserandChrome MCP, which interact with session state and cookies; however, the skill logic itself does not perform any sensitive data access or network operations.
Audit Metadata