coding-tutor

SUSPICIOUS: The skill's teaching and file-writing behavior is broadly consistent with its educational purpose, but it relies on a same-publisher download-and-execute chain for helper scripts that are not pinned, signed, or independently inspectable from the provided evidence. Main risk is supply-chain trust rather than clear malicious behavior or credential theft.