Chords Fetcher

Fetch clean guitar chords and lyrics from popular sites (mychords.net, amdm.ru, ultimate-guitar.com). Strips tabs, fixes formatting.

Security Scan

The skill's code, instructions, and dependencies are consistent with its stated purpose of searching public chord sites and cleaning up results; it performs network searches and page fetches but does not request unrelated credentials or hidden endpoints.

Purpose & Capability

Name/description match the code and instructions: the script searches via DuckDuckGo (ddgs), fetches pages from the three listed sites, and extracts/cleans chord text. The declared dependencies (beautifulsoup4, ddgs) and the network calls to those sites are proportionate to the stated purpose.

Instruction Scope

SKILL.md instructs the agent to run the included Python script (via 'uv run python chords.py <query>'). That matches the code. The script makes outbound network requests to DuckDuckGo and the target sites (expected), and prints results. No instructions reference unrelated files, system credentials, or other sensitive data, but the agent will send the user's query to third-party search and chord sites (privacy consideration).

Install Mechanism

There is no install spec (instruction-only plus an included script). Dependencies are standard Python packages and there are no downloads from untrusted URLs or extract/install steps that write arbitrary binaries to disk. The readme suggests using 'uv' to manage deps — users should ensure dependency installation is done from trusted package sources (pip).

Credentials

The skill requests no environment variables, credentials, or config paths. The code does not read environment secrets. It does perform network I/O (DuckDuckGo + target hosts), which is reasonable for a web-scraping search tool but will expose the search query and resulting requests to those external services.

Persistence & Privilege

The skill is not configured as always:true and does not attempt to persist or modify other skills or global agent configuration. It runs on demand and prints results — no elevated or permanent privileges requested.

Assessment

This skill appears to do what it says: run the included Python script which queries DuckDuckGo and fetches pages from the three listed chord sites, then cleans the text. Before installing or invoking it, consider: (1) queries are sent to external services (DuckDuckGo and the chord sites) so avoid including sensitive information in search strings; (2) ensure dependencies (ddgs, beautifulsoup4) are installed from trusted package indexes; (3) run in an environment where outbound network access is acceptable or sandboxed if you have strict data policies; (4) you may want to review the ddgs package (and its network behavior) if you require stronger assurance. The code includes an allow-list for hosts and basic URL checks which reduces risk of fetching arbitrary sites.

Fetch clean guitar chords and lyrics without ads, pop-ups, or messy guitar tabs.

Usage

When the user asks for chords to a song (e.g., "аккорды Кино Звезда по имени Солнце", "chords behind blue eyes"), use the exec tool to run the fetcher script.

uv run python chords.py <song_name_and_artist>

Features

• Searches across multiple sources: mychords.net, ultimate-guitar.com, amdm.ru via DuckDuckGo.
• Strips out guitar tabs (e|---, B|---, etc.) to keep the output clean.
• Fixes spacing where chords are glued to lyrics (e.g., AmWhite snow → Am White snow).
• Falls back to the next source if one is unavailable.

Dependencies

• beautifulsoup4
• ddgs (DuckDuckGo Search)

Notes

• Run the script from the skill's directory.
• If the script returns an error or cannot find the song, inform the user.