DeepTutor v1.4.4 Release Notes

Release Date: 2026.06.13

A focused release on top of v1.4.3: the skill library opens
up to the wider Agent-Skills ecosystem — install community skills from
ClawHub with one command — and knowledge-base
document previews catch up with the chat file viewer. Fully drop-in, no
migrations, no breaking changes.

What's New

Hub Skills, One Command Away

DeepTutor skills share their format with the Agent-Skills ecosystem
(SKILL.md + support files), so external registries are now a native
source for the skill library:

deeptutor skill search "git release notes"        # semantic search on the hub
deeptutor skill install clawhub:gh-release-notes  # verify → fetch → register
deeptutor skill install [email protected]          # hub defaults to clawhub; @ pins a version
deeptutor skill list                              # local skills with hub provenance

Every import runs the same security gate, whatever the source: the hub's
security verdict is checked first (flagged packages are refused unless
--allow-unverified), archives are extracted with zip-slip / zip-bomb
guards, support files pass a text/script suffix whitelist so binaries
never land in the workspace, and always: frontmatter is stripped — a
downloaded package can never inject itself into every system prompt.
Provenance (hub, version, verdict) is recorded in .hub-lock.json for
audits. Registries beyond ClawHub plug in via settings/skill_hubs.json.

In multi-user deployments, installing is admin-only
(POST /api/v1/multi-user/admin/skills/install) and install ≠ assign:
the skill lands in the admin catalog, invisible to other users until a
grant assigns it — so admins can vet hub skills in their own chats first.

Knowledge-Base Previews, For Real

The KB Files tab now renders Word and Excel documents in the browser —
the same faithful docx/xlsx previewers the chat file viewer got in
v1.4.3 — and a new file-preview-text endpoint serves extracted plain
text on demand, so PowerPoint and other office files preview as text
instead of a download button. The DOCX previewer also learned to scale
pages down to fit narrow side panels instead of clipping them.

Markdown Previews Render Embedded Images

Self-contained markdown files with base64-embedded screenshots now
display them: the renderers allow safe raster data:image/* URLs on
images (react-markdown strips every data: URL by default), while
script-capable schemes stay blocked.

Localized READMEs, Re-synced

All ten translated READMEs (中文, 日本語, Español, Français, …) were
rebuilt against the current English README — Partners, the v1.4.x
release history, and the refreshed layout included.

Upgrade Notes

• Drop-in from v1.4.3: pip install -U deeptutor; Docker users pull
  ghcr.io/hkuds/deeptutor:latest. No migrations.
• deeptutor skill install talks to clawhub.ai over HTTPS; air-gapped
  deployments can point a mirror or a fetch CLI at it via
  settings/skill_hubs.json.

Full Changelog: https://github.com/HKUDS/DeepTutor/compare/v1.4.3...v1.4.4