Guitar Chord
PassAudited by ClawScan on May 10, 2026.
Overview
This appears to be a local guitar chord utility, with one noteworthy optional diagram feature that runs an external local Cargo project.
This skill looks safe for ordinary chord and scale calculations. If you ask it for chord diagrams, be aware it may run an external local Cargo project at ~/workspace/ascii_chord, so only use that feature if that project is present and trusted.
Findings (1)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Chord lookup should work locally, but diagram requests may fail or may run code from a separate local project if it exists.
When chord diagrams are requested, the script runs Cargo in a local project outside the skill manifest. That helper is not included in the provided files or declared in install requirements.
cwd = os.path.join(home, 'workspace', 'ascii_chord') ... subprocess.run(['cargo', 'run', '--', 'get', chord_name], cwd=cwd, ...)
Use the diagram option only if you trust the local ~/workspace/ascii_chord project and Cargo installation; the skill publisher should document or vendor this dependency.