deeptutor-cli
HKUDS/DeepTutorSkill
Configure, manage, and use DeepTutor through its CLI, including capabilities, knowledge bases, partners, memory, sessions, notebooks, providers, skills, and the server or Web app.
Why this score
This repo hosts 6 skills, so its 41,772 stars are split between them (about 6,962 each) for scoring.
Popularity score: 90/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Oct 20, 2026 at commit a31d82624c27, first 300 source files (it's a large repo), with Cisco's open-source skill-scanner.
What its code does:
- Reads environment variables and sends network requests with them API clients do this to send your key to the service. Check which service it talks to.
- Runs shell commands Common for dev tools. Read the commands it runs.web/scripts/build.mjs:3, web/scripts/dev.mjs:24, web/scripts/typecheck.mjs:3 and 2 more
- Reads environment variables, where API keys usually livescripts/docker_compose.py:114
- Includes scripts in hidden folders Folders starting with a dot are easy to miss when you read a repo.web/.dependency-cruiser.cjs
Web addresses in its code:
- cdn.jsdelivr.netweb/lib/iframe-html.ts:13
- eduhub.deeptutor.infodeeptutor_cli/skill.py:311
- api.openai.comdeeptutor_cli/init_wizard.py:689
- hkuds.devdeeptutor/tools/web_fetch.py:42
These are the sites named in the code, so it's where your data could go. It isn't a complete list: code can build addresses while it runs, and a few of these may be links rather than calls. Whatever you send also goes to the AI model you use.
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Nothing from another maker does quite the same job yet.