Violin

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: violin Version: 1.0.0 The skill bundle is benign. It focuses on providing violin practice advice and tracking progress. The only file system interactions involve creating a `~/violin/` workspace and writing progress logs within it, which is explicitly stated and necessary for the skill's functionality. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts designed to subvert the agent for harmful purposes. All instructions are aligned with the stated goal of a violin practice assistant.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence
ASI10: Rogue Agents
What this means

A new folder may be created in the user's home directory to store violin practice materials.

Why it was flagged

The skill may create a persistent local workspace automatically on first use. This is disclosed and scoped to a violin folder, with no evidence of hidden background behavior.

Skill content
Create `~/violin/` as workspace on first interaction
Recommendation

Install only if you are comfortable with a local ~/violin/ folder being created; review or delete that folder if you no longer want the records.

What this means

Future advice may rely on saved practice notes, and those files could contain personal learning goals or schedule information.

Why it was flagged

The progress-tracking format stores ongoing practice history, goals, repertoire, and technique notes as persistent local context for future coaching.

Skill content
~/violin/
├── repertoire.md
├── sessions/
├── technique.md
└── goals.md
Recommendation

Keep the logs limited to information you are comfortable storing locally, and review them before sharing or reusing them in other contexts.