tutor-setup — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited tutor-setup (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
NEVER access files outside the current working directory (CWD). All source scanning, reading, and vault output MUST stay within CWD and its subdirectories. If the user provides an external path, ask them to copy the files into CWD first.
On invocation, detect mode automatically:
package.json, pom.xml, build.gradle, Cargo.toml, go.mod, Makefile,*.sln, pyproject.toml, setup.py, Gemfile
.git/ is the sole indicator and no source code files (*.ts, *.py, *.java, *.go, *.rs, etc.) exist, default to Document Mode.Transforms knowledge sources (PDF, text, web, epub) into study notes. Templates: templates.md
**/*.pdf, **/*.txt, **/*.md, **/*.html, **/*.epub (exclude node_modules/, .git/, dist/, build/, StudyVault/). Present for user confirmation..txt first, then Read the .txt file. pdftotext "source.pdf" "/tmp/source.txt"pdftotext is not installed, install it first: brew install poppler (macOS) or apt-get install poppler-utils (Linux)..md, .txt, .html) → Read directly.{ source_file → actual_topics → page_ranges }Equal Depth Rule: Even a briefly mentioned subtopic MUST get a full dedicated note supplemented with textbook-level knowledge.
Define tag vocabulary before creating notes:
#data-hazard)Create StudyVault/ with numbered folders per templates.md. Group 3-5 related concepts per file.
Create 00-Dashboard/: MOC, Quick Reference, Exam Traps. See templates.md.
→ [[Concept Note]] link; all key formulasPer templates.md. Key rules:
source_pdf, part, keywords (MANDATORY)source_pdf: 원문 미보유[[wiki-links]], callouts ([!tip], [!important], [!warning]), comparison tables > prosePer templates.md. Key rules:
> [!answer]- 정답 보기 fold callout> [!hint]- / > [!summary]- fold callouts## Related Concepts with [[wiki-links]]## Related Notes on every concept note[[Concept Note]] linksVerify against quality-checklist.md Document Mode section. Fix and re-verify until all checks pass.
Generates a new-developer onboarding StudyVault from a source code project. Full workflow: codebase-workflow.md Templates: codebase-templates.md
| Phase | Name | Key Action |
|---|---|---|
| C1 | Project Exploration | Scan files, detect tech stack, read entry points, map directory layout |
| C2 | Architecture Analysis | Identify patterns, trace request flow, map module boundaries and data flow |
| C3 | Tag Standard | Define #arch-*, #module-*, #pattern-*, #api-* tag registry |
| C4 | Vault Structure | Create StudyVault/ with Dashboard, Architecture, per-module, DevOps, Exercises folders |
| C5 | Dashboard | MOC (Module Map + API Surface + Getting Started + Onboarding Path) + Quick Reference |
| C6 | Module Notes | Per-module notes: Purpose, Key Files, Public Interface, Internal Flow, Dependencies |
| C7 | Onboarding Exercises | Code reading, configuration, debugging, extension exercises (5+ per major module) |
| C8 | Interlinking | Cross-link modules, architecture ↔ implementations, exercises ↔ modules |
| C9 | Self-Review | Verify against quality-checklist.md Codebase Mode section |
See codebase-workflow.md for detailed per-phase instructions.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.