Tutor
v1.0.0Personalized tutoring for any age and subject with adaptive teaching, progress tracking, and parent oversight.
⭐ 2· 1.1k·12 current·12 all-time
byIván@ivangdavila
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (personalized tutoring, progress tracking, parent oversight) align with the instructions and the declared storage layout; required capabilities are limited to reading/writing local learner files and producing reports — reasonable for the stated purpose.
Instruction Scope
Instructions are explicit about reading/writing files under ~/tutor/{learner}/ and logging sessions. There is an ambiguous escalation instruction to 'flag immediately to parent/guardian' that does not specify the mechanism (file, UI notification, email, or external endpoint). No network endpoints, hidden code, or env-var access are present in the instructions.
Install Mechanism
Instruction-only skill with no install spec and no code files — minimal risk from installation. Nothing is downloaded or written by an installer step.
Credentials
The skill requests no environment variables, credentials, or config paths. All required data is local and stored under a dedicated ~/tutor/ directory, which is proportionate to a tutoring tool.
Persistence & Privilege
Skill persists data to the user's home (~ /tutor) on normal runs (creates files like sessions.jsonl and progress.json). always:false and no elevated privileges are requested. Users should be aware data is stored persistently and consider file permissions and host environment (local vs cloud).
Assessment
This skill appears coherent and self-contained, but review these practical points before installing: 1) Confirm where the agent runs — if it runs on a cloud host, session files in ~/tutor will be stored on that host; avoid storing sensitive personally identifying details there. 2) Decide how 'flag to parent/guardian' should actually work (manual notification, email, or other); the skill doesn't define a safe notification channel. 3) Set restrictive file permissions on ~/tutor and consider encryption/backups if you will store minors' personal data. 4) If you need auditability, verify how reports are delivered and who can access them. 5) Follow the skill's academic-integrity rules (it will avoid giving direct answers) and avoid using it to complete graded submissions. If you want stronger assurances, ask the publisher for clarification on escalation mechanics and data retention policies.Like a lobster shell, security has layers — review code before you run it.
latestvk979kwkk2abnw7wvyhebfqdh2n813che
License
MIT-0
Free to use, modify, and redistribute. No attribution required.