The Agent Skills Directory

[Prompt Injection] (SAFE): No instructions found that attempt to override agent behavior, bypass safety filters, or extract system prompts.
[Data Exposure & Exfiltration] (SAFE): No hardcoded credentials, sensitive file path access, or network operations to external domains were detected. The code operates entirely on provided musical data.
[Obfuscation] (SAFE): No evidence of Base64 encoding, zero-width characters, homoglyphs, or other obfuscation techniques.
[Unverifiable Dependencies & Remote Code Execution] (SAFE): The skill only references standard React hooks. No remote script execution or unverifiable third-party package installations are present.
[Privilege Escalation] (SAFE): No commands involving sudo, chmod, or system configuration modifications were found.
[Persistence Mechanisms] (SAFE): No attempts to modify shell profiles, cron jobs, or registry keys to maintain access were detected.
[Metadata Poisoning] (SAFE): The skill metadata (name, description) accurately reflects its functionality and contains no hidden instructions.
[Indirect Prompt Injection] (SAFE): While the skill processes user-provided inputs like root notes and scale types, these are used as keys for internal data mapping. There is no risk of command execution or logical bypass from these inputs.
Ingestion points: User-specified rootNote and scale in the Fretboard component.
Boundary markers: Not applicable as the skill uses internal constants for logic.
Capability inventory: UI rendering via React only.
Sanitization: Implicitly handled via index lookups in defined constant arrays.
[Time-Delayed / Conditional Attacks] (SAFE): No logic gating malicious behavior based on time, environment, or specific triggers was identified.
[Dynamic Execution] (SAFE): No use of eval(), exec(), or dynamic path loading. All React components use static templates.

guitar-fretboard