Code Mentor

Comprehensive AI programming tutor for all levels. Teaches programming through interactive lessons, code review, debugging guidance, algorithm practice, project mentoring, and design pattern exploration. Use when the user wants to: learn a programming language, debug code, understand algorithms, review their code, learn design patterns, practice data structures, prepare for coding interviews, understand best practices, build projects, or get help with homework. Supports Python and JavaScript.

Install only if you are comfortable with a coding tutor that may read selected code files, run test suites on your machine, and save session progress locally. Avoid running its test helper on untrusted repositories or projects with secrets, and review or remove the learning log if you do not want progress notes retained.

Type: OpenClaw Skill Name: code-mentor Version: 1.0.2 The skill is classified as suspicious due to several high-risk capabilities, although without clear evidence of intentional malicious intent. The `SKILL.md` contains direct instructions to the AI agent to update `references/user-progress/learning_log.md`, which, while benign in purpose, demonstrates a form of prompt injection. More significantly, the `scripts/run_tests.py` script executes user-provided code via external test runners (`pytest`, `unittest`, `jest`), allowing for potential arbitrary code execution if a malicious user provides a crafted test file. Additionally, the `scripts/analyze_code.py` and `scripts/complexity_analyzer.py` scripts can read and process arbitrary files, which could be leveraged by a malicious agent to access sensitive local data and output its content.