Song

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: song Version: 1.0.0 The OpenClaw skill bundle is designed to assist with songwriting, providing structured guidance and managing song drafts and user preferences within the `~/songs/` directory. All file operations and instructions are directly aligned with this stated purpose. There is no evidence of prompt injection attempts against the agent, data exfiltration, malicious execution, persistence mechanisms, or any other harmful behavior across any of the provided files.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may create or update song draft files in the local songs folder while helping with songwriting.

Why it was flagged

The skill expects the agent to create and update local song draft files, which is a real file-mutation capability, but it is bounded to the disclosed ~/songs workflow and supports the stated purpose.

Skill content
**Version rule:** Never edit in place. Copy to versions/, increment, edit copy, update current.md.
Recommendation

Install only if you are comfortable with the agent maintaining song files under ~/songs, and periodically review that folder.

What this means

Future song suggestions may be shaped by saved preferences and prior feedback, and any private details placed there may be reused in later songwriting sessions.

Why it was flagged

The skill stores and reuses user preferences across sessions, which is purposeful personalization but creates persistent context that can influence future outputs.

Skill content
Track in `~/songs/preferences.md` ... Update after each song based on their feedback.
Recommendation

Keep sensitive personal information out of ~/songs/preferences.md and review or delete stored preferences if they become inaccurate or too personal.