← Back to Skills Marketplace
90
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install tutor-buddy-pro
Description
AI tutor that guides homework problem-solving with step-by-step Socratic questions, creates personalized study plans, runs quizzes, and adapts to your learni...
Usage Guidance
This skill appears to do what it says: local tutoring with progress tracking and an optional report renderer. Before installing: 1) Inspect and run the setup commands manually rather than blindly pasting the SETUP-PROMPT; verify the SKILL_DIR value the find command returns to avoid unintended chmod/cp actions. 2) If you won't use reports, you can ignore scripts/generate-progress-report.sh (it requires Playwright to render PNGs). 3) Keep the skill offline if you want to ensure no accidental network sync; the dashboard spec refers to future syncing but no outbound network code is present today. 4) Verify data directory permissions (data/ set to owner-only) and review data/learner-profile.json contents if minors will use the tool. 5) The SKILL.md contains explicit prompt-injection defenses — good — but always be cautious about pasting content from untrusted sources. If you need higher assurance, run the script in an isolated environment first and consider removing dashboard sync hooks until you review or implement authenticated transports.
Capability Analysis
Type: OpenClaw Skill
Name: tutor-buddy-pro
Version: 1.0.0
The Tutor Buddy Pro skill bundle is a highly professional and security-conscious educational tool. It features robust prompt injection defenses in SKILL.md, specifically instructing the agent to treat user-provided content as untrusted data. The included shell script (scripts/generate-progress-report.sh) is hardened against common vulnerabilities, utilizing HTML escaping to prevent XSS during report rendering and path normalization to prevent traversal. Furthermore, the bundle includes a detailed SECURITY.md and a CODEX-SECURITY-AUDIT.md that documents the intentional remediation of potential flaws, demonstrating a clear commitment to safety and data privacy.
Capability Assessment
Purpose & Capability
The name/description (Socratic tutor, study plans, quizzes, progress tracking) matches the files and instructions: SKILL.md, config, example sessions, a report-generation script, and a dashboard spec. There are no unrelated credentials, binaries, or opaque installers requested that would be disproportionate to a tutoring skill.
Instruction Scope
SKILL.md instructs the agent to use vision tools, transcribe images, read and update local learner data files (data/learner-profile.json, data/quiz-history.json) and to never treat uploaded content as control instructions. Reading/writing those data files is coherent for progress-tracking, but the SKILL.md gives the agent permission to read local data — users should expect local student data to be accessed by the skill. The skill explicitly includes prompt-injection defenses in the system prompt (so the pre-scan patterns are present for defense, not exploitation).
Install Mechanism
There is no external install spec; the package is instruction-only with one helper script. No archives are downloaded from arbitrary URLs and there are no npm/go installs. The generate-progress-report.sh uses Playwright optionally (documented) but Playwright is not auto-installed by the skill.
Credentials
The skill requires no environment variables, no credentials, and no external API keys. It reads and writes local data files (data/) which is proportionate to the stated functionality. The dashboard spec describes a web dashboard and endpoints, but no network sync code is present in the repository; the repo does note this as a future-design risk.
Persistence & Privilege
The skill does not request 'always: true' or elevated privileges. The setup instructions ask the operator to create data directories and change permissions (chmod) and to copy config files into data/ — appropriate for storing local learner data, but the SETUP-PROMPT.md contains fragile 'find' usages (the included CODEX audit flagged a possible path-resolution issue). Running the provided setup commands without verifying SKILL_DIR could accidentally modify unexpected paths; verify the resolved path before executing Step 5.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install tutor-buddy-pro - After installation, invoke the skill by name or use
/tutor-buddy-pro - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release
Metadata
Frequently Asked Questions
What is tutor-buddy-pro?
AI tutor that guides homework problem-solving with step-by-step Socratic questions, creates personalized study plans, runs quizzes, and adapts to your learni... It is an AI Agent Skill for Claude Code / OpenClaw, with 90 downloads so far.
How do I install tutor-buddy-pro?
Run "/install tutor-buddy-pro" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is tutor-buddy-pro free?
Yes, tutor-buddy-pro is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does tutor-buddy-pro support?
tutor-buddy-pro is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created tutor-buddy-pro?
It is built and maintained by Nollio (@nollio); the current version is v1.0.0.
More Skills