Piano
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a music utility for piano practice and repertoire management. It interacts with the user to provide educational content and stores logs in a dedicated workspace directory (~/Clawic/data/piano/) that corresponds to the vendor's name.
- [DATA_EXPOSURE]: The skill is instructed to create and manage files for repertoire and sessions. This behavior is consistent with its stated purpose and does not access sensitive system configuration files or private credentials.
- [INDIRECT_PROMPT_INJECTION]: The skill has an injection surface via user practice updates. 1. Ingestion points: User descriptions of practice sessions and piece progress are stored in markdown files. 2. Boundary markers: None. 3. Capability inventory: File writing to the local music data directory. 4. Sanitization: None. There is no security threat as the skill lacks the capabilities (such as network access or administrative command execution) required to weaponize this surface.
Audit Metadata