Code Mentor

Comprehensive AI programming tutor for all levels. Teaches programming through interactive lessons, code review, debugging guidance, algorithm practice, project mentoring, and design pattern exploration. Use when the user wants to: learn a programming language, debug code, understand algorithms, review their code, learn design patterns, practice data structures, prepare for coding interviews, understand best practices, build projects, or get help with homework. Supports Python and JavaScript.

Install only if you are comfortable with a coding tutor that may read selected code files, run local test suites, and save progress notes. Do not use the test runner on untrusted repositories or projects containing secrets unless you run it in an isolated environment, and review or delete references/user-progress/learning_log.md if you do not want session history retained.

Type: OpenClaw Skill Name: code-mentor Version: 1.0.2 The skill is classified as suspicious due to several high-risk capabilities, although without clear evidence of intentional malicious intent. The `SKILL.md` contains direct instructions to the AI agent to update `references/user-progress/learning_log.md`, which, while benign in purpose, demonstrates a form of prompt injection. More significantly, the `scripts/run_tests.py` script executes user-provided code via external test runners (`pytest`, `unittest`, `jest`), allowing for potential arbitrary code execution if a malicious user provides a crafted test file. Additionally, the `scripts/analyze_code.py` and `scripts/complexity_analyzer.py` scripts can read and process arbitrary files, which could be leveraged by a malicious agent to access sensitive local data and output its content.