rem

ReviewAudited by ClawScan on May 1, 2026.

Overview

This is a coherent macOS Reminders CLI skill, but users should review the external installer and be careful with commands that can delete reminders or install the skill into agent directories.

This skill appears aligned with managing Apple Reminders from a terminal. Before installing, make sure you trust the external rem CLI installer, understand that the tool can read and change your Reminders data, and use deletion or all-agent installation commands only when you explicitly intend those actions.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the CLI may run code fetched from the internet and may change over time.

Why it was flagged

The skill directs users to install an external CLI via a remote shell script or an unpinned latest Go install. This is disclosed setup behavior, but the executed code is outside the reviewed artifact set.

Skill content
curl -fsSL https://rem.sidv.dev/install | bash
...
go install github.com/BRO3886/rem/cmd/rem@latest
Recommendation

Review the installer source, prefer pinned releases where possible, and install only if you trust the rem project and domain.

What this means

An agent or user could remove reminders or whole lists if destructive commands are used incorrectly.

Why it was flagged

The CLI can delete reminders and entire reminder lists, including a force option that bypasses confirmation. This is aligned with the skill purpose and is documented, but it can cause data loss if misused.

Skill content
Delete a reminder list and all its reminders. Prompts for confirmation.
...
`--force` | — | Skip confirmation | false
Recommendation

Use list/show/export commands before destructive changes, avoid --force unless explicitly intended, and keep backups for important reminders.

What this means

The CLI may read and modify personal Reminders data available to the local macOS account.

Why it was flagged

The skill relies on local macOS Reminders/EventKit access, which may expose personal or iCloud-synced reminder titles, notes, due dates, and lists.

Skill content
A Go CLI that wraps macOS Reminders. Sub-200ms reads via cgo + EventKit.
Recommendation

Grant Reminders access only if you are comfortable with the agent using this data, and review macOS privacy permissions if needed.

What this means

Using the all-agents install option could add this skill to other local agent environments.

Why it was flagged

The CLI can write skill files into multiple agent skill directories. The paths and targets are disclosed and user-directed, but this affects agent behavior beyond Reminders data.

Skill content
rem skills install --agent all              # Install for all agents
...
Supported targets:
- `claude`   → `~/.claude/skills/rem-cli/`
- `codex`    → `~/.agents/skills/rem-cli/`
- `openclaw` → `~/.openclaw/skills/rem-cli/`
Recommendation

Install only for the agent you intend to use, verify the target directory, and use the documented status or uninstall commands if needed.