claude-code-tutor

Pass

Audited by Gen Agent Trust Hub on Apr 9, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill manages student progress by reading from and writing to a local JSON file located at ~/.claude-code-tutor-progress.json using standard shell commands (cat, echo).
  • [EXTERNAL_DOWNLOADS]: The curriculum recommends that users install helpful community skills using npx skills add, specifically mentioning the recall skill from the arjunkmrm/recall GitHub repository and a Python development skill from the author's own repository (pengelbrecht/skills).
  • [DATA_EXFILTRATION]: The tutorial modules provide guidance on using browser automation tools like agent-browser and Chrome MCP, which interact with session state and cookies; however, the skill logic itself does not perform any sensitive data access or network operations.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 9, 2026, 11:58 AM