ClawHub
Back to skill

Security audit

Guitar Chord

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed local Rust tool for displaying guitar chord diagrams, with only minor local build and optional file-output side effects.

Install this only if you are comfortable running a bundled Rust CLI and allowing Cargo to create build artifacts in the skill directory. Avoid using all --save unless you want it to write or overwrite all_supported_chords.md in the current working directory.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Rogue AgentSelf-Modification, Session Persistence
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (4)

Session Persistence

Medium
Category
Rogue Agent
Content
```

This will:
1. Create a `.gitignore` in the skill directory to exclude cargo build artifacts (`/target`) from git
2. Pre-warm the cargo build cache so the first chord lookup is fast

## First Run Warning
Confidence
60% confidence
Finding
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Description-Behavior Mismatch

Medium
Confidence
93% confidence
Finding
The skill description says it shows ASCII guitar chord diagrams, but the CLI also supports writing a Markdown file to disk via the `All --save` path. That is a capability expansion beyond simple display behavior, which matters in agent settings because file-system side effects can be triggered unexpectedly and used to persist data or alter the workspace.

Context-Inappropriate Capability

Medium
Confidence
91% confidence
Finding
The `--save` option performs a local file write to `./all_supported_chords.md` without that capability being justified by the stated purpose of merely showing chord diagrams. In an agent environment, unjustified write primitives increase risk because they can create or overwrite files in the current working directory, introducing persistence and unintended state changes.

Missing User Warnings

Low
Confidence
84% confidence
Finding
The code writes output to disk when `--save` is used, but there is no explicit warning, confirmation, or prominent disclosure to users about the filesystem side effect. While the written content is non-sensitive chord data, undisclosed file writes are still risky in agent workflows because they can surprise users and leave artifacts in the workspace.

Static analysis

No suspicious patterns detected.