Guitar Tab Finder
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This instruction-only skill appears benign: it searches for guitar tab sources and only performs local Obsidian/file actions when the user explicitly asks.
This skill is safe to consider for normal use. Be mindful that Obsidian mode can write or copy files, so only enable it when you explicitly want a note created in a specific folder.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If the user chooses Obsidian mode, the agent may create, update, or copy files in the approved folder.
The skill contemplates local file and Obsidian vault operations, which can modify user files, but it also explicitly requires user request, target-path confirmation, and path boundaries.
Perform any local file/vault action **only when explicitly requested**. Before writing files, require a user-provided target path/folder ... Do not read/write outside the approved target path.
Only provide a target folder you are comfortable modifying, and review the generated note content before asking the agent to write it.