ClawHub

Joplin

v1.3.6

Interact with Joplin notes via CLI. Use for reading, creating, editing notes and managing todos. Supports WebDAV sync and kanban-formatted notes.

⭐ 0· 102·0 current·0 all-time
byDave K@davek-dev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (Joplin CLI) match the SKILL.md contents. All commands and examples are Joplin CLI operations; nothing unrelated (no cloud providers, unrelated services, or extra binaries) is requested.
✓
Instruction Scope
Runtime instructions are limited to using the joplin CLI (list, read, create, edit, delete, sync, export, import, kanban formatting). They don't instruct reading unrelated system files or environment variables. They do show examples configuring WebDAV (URL, username, password) which is expected for sync operations.
✓
Install Mechanism
No install spec and no code files — the skill is instruction-only and does not write or fetch code to disk.
✓
Credentials
The skill declares no required environment variables or credentials. The SKILL.md shows how a user might provide WebDAV credentials to Joplin's config, which is proportional to the sync feature and is not requested by the skill itself.
✓
Persistence & Privilege
always is false and there is no install-time persistence. The skill does not request system-wide privileges or modify other skills' configuration.
Assessment
This skill is an instruction-only wrapper for the joplin CLI and appears coherent. Before using it, make sure: (1) you have the joplin CLI installed and trust it; (2) you understand the agent will be instructed to run commands that can modify or delete notes (ask for explicit confirmation before destructive actions); (3) if you configure WebDAV, you only use trusted servers because sync will transmit your notes and credentials; and (4) keep backups of your notes before allowing unattended/automated use. If you want stricter safety, require the agent to prompt you before any rm/sync/import/export operations.

Like a lobster shell, security has layers — review code before you run it.

latestvk979yvwt1pjfxbb0hxqmhjy3ws83527w

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments