ClawHub

Guitar Tab Finder

v1.0.1

Find guitar tabs/sheet sources for a song from a title or link (especially YouTube), rank the best matches, and produce a clean practice note. Use when a use...

⭐ 0· 216·2 current·2 all-time
byrobin@robinnnnn
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the SKILL.md workflow: it only describes web lookups, ranking, and producing markdown/json/optional Obsidian notes. There are no unrelated env vars, binaries, or installs requested.
ℹ
Instruction Scope
Instructions primarily describe web searches and structured output (markdown/json). The skill permits local filesystem operations (Obsidian mode, copying a provided PDF, deduplication checks) but explicitly requires explicit user consent and a target path before writing. This is reasonable but relies on the agent faithfully enforcing the guardrails; accidental or ambiguous prompts could lead to unwanted file reads/writes.
✓
Install Mechanism
Instruction-only skill with no install spec and no code files — minimal footprint and nothing written to disk by default.
✓
Credentials
No environment variables, credentials, or config paths are requested. The requested access (web search, optional user-specified local folder) is proportionate to the described functionality.
✓
Persistence & Privilege
always is false and the skill is user-invocable; it does not request persistent or elevated platform privileges. Autonomous invocation is allowed by default but not combined with other concerning factors here.
Assessment
This skill appears coherent and low-risk in its default, web-only mode. Before allowing local file operations or uploading PDFs: (1) only provide a specific target folder (never a root or broad path), (2) confirm the agent's prompt asking to write files before permitting it, (3) avoid uploading copyrighted material you don't own or have rights to host, and (4) test with a harmless song first to verify it doesn't read or write outside the specified folder. If you see any unexpected filesystem access, revoke the skill immediately.

Like a lobster shell, security has layers — review code before you run it.

latestvk974ar06g5r8tbd9hd3q3txn8n82f1p5

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments