Home / Claude Code mods / Security / lesson-cards

lesson-cards

lesson-cards is a Claude Code mod by yonatangross that displays lesson hint cards when tool calls match known patterns. Additive surface during pilot; the classic --strict guard keeps its 12 block-severity denies.

Updated 2026-10-17

What is lesson-cards?

lesson-cards is a Claude Code mod by yonatangross that displays lesson hint cards when tool calls match known patterns. Additive surface during pilot; the classic --strict guard keeps its 12 block-severity denies. It is listed under Security and has 296 GitHub stars.

TypeClaude code mod
Authoryonatangross
Repositoryyonatangross/orchestkit
Popularity296 GitHub stars
CategorySecurity
SecurityLow risk (88/100)
Rank#58 of 5,272 Claude Code mods; #26 in Security
LicenseMIT
Last commit2026-10-17
Stars this week+4
Hooks4 events
Seesevery tool call
Draws onToolUse

Is lesson-cards safe to install?

lesson-cards scores 88/100 on the MCPMods security check: Low risk. Things to review: reads environment variables. It passed 7 of 8 checks.

Mod footprints come from claude plugin validate, which lists every event a mod hooks and every API call it makes without running it.

CheckResult
No network accessPass
Starts no processesPass
Writes no files or configPass
Reads environment variablesReview
Only sees the events it hooksPass
Doesn't drive ClaudePass
Passes claude plugin validatePass
Has an open-source licensePass

API calls in its code

CallWhat it means
$.command.register
$.env.getreads env vars
$.fs.listreads files
$.fs.readreads files
$.fs.statreads files
$.ui.askdraws interface
$.ui.invalidatedraws interface
$.ui.noticedraws interface
$.ui.resolvedraws interface

How do I install lesson-cards?

  1. Check your Claude Code version. Mods need Claude Code 2.1.287 or later and are on by default.
    claude --version
  2. Read its footprint. This lists every event it hooks and every API call it makes, without running it.
    git clone https://github.com/yonatangross/orchestkit
    claude plugin validate ./orchestkit/mods/lesson-cards
  3. Install it. Run this in your terminal, then /reload-plugins in an open session.
    git clone https://github.com/yonatangross/orchestkit && claude --plugin-dir ./orchestkit/mods/lesson-cards

Or ask Claude to set it up

Paste this into Claude Code and it installs lesson-cards for you:

Install the "lesson-cards" Claude Code mod from https://github.com/yonatangross/orchestkit/tree/main/mods/lesson-cards. Run claude plugin validate on it first and show me what it can access before you enable it.

More from yonatangross/orchestkit

This repository has 4 Claude Code mods on MCPMods.

  • memory-lens: Recalls the few memories related to each prompt: one line for the human, one context entry for the model. Local files on (Review before installing)
  • promote-lights: Shows CI status lights above the prompt while a promote PR (base main) is open. One REST page per minute, PR-open only. (Review before installing)
  • secrets-veil: Masks secret values in tool results before the model reads them: named vendor variables, value-shape patterns, and high- (Low risk)