Song

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may create or update song draft files in the local songs folder while helping with songwriting.

Why it was flagged

The skill expects the agent to create and update local song draft files, which is a real file-mutation capability, but it is bounded to the disclosed ~/songs workflow and supports the stated purpose.

Skill content
**Version rule:** Never edit in place. Copy to versions/, increment, edit copy, update current.md.
Recommendation

Install only if you are comfortable with the agent maintaining song files under ~/songs, and periodically review that folder.

What this means

Future song suggestions may be shaped by saved preferences and prior feedback, and any private details placed there may be reused in later songwriting sessions.

Why it was flagged

The skill stores and reuses user preferences across sessions, which is purposeful personalization but creates persistent context that can influence future outputs.

Skill content
Track in `~/songs/preferences.md` ... Update after each song based on their feedback.
Recommendation

Keep sensitive personal information out of ~/songs/preferences.md and review or delete stored preferences if they become inaccurate or too personal.