OneNote
ReviewAudited by ClawScan on May 17, 2026.
Overview
This appears to be a normal OneNote connector through ClawLink, but it requires trusting ClawLink and its plugin with your OneNote connection and approving any note changes.
Before installing, make sure you trust ClawLink and the ClawHub plugin source. During setup, use the official ClawLink URLs, review the Microsoft/OneNote permissions, do not paste raw credentials into chat, and only approve previews for note changes you actually want.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing the separate plugin is necessary for the skill to work, but it means the user is trusting code outside this skill package.
The skill itself is instruction-only, but its setup depends on a separate plugin that is not included in the reviewed artifacts.
Install the verified ClawLink plugin: `openclaw plugins install clawhub:clawlink-plugin`
Install the plugin only from the expected ClawHub source and verify ClawLink before pairing or connecting OneNote.
Connecting OneNote can give the integration access to notebooks, sections, pages, and note content according to the approved scopes.
The skill relies on delegated account access and credential handling through ClawLink, which is expected for a OneNote integration but sensitive.
ClawLink ... handles hosted connection flows and credentials so you don't need to configure OneNote API access yourself.
Review the OneNote/Microsoft permissions during connection and revoke the ClawLink connection if you no longer need it.
If approved, the agent may create or update OneNote content; accidental approval could change notes.
The skill can invoke dynamic OneNote tools, including writes, but it includes preview and confirmation safeguards.
For writes or anything marked as requiring confirmation, call `clawlink_preview_tool` first, then confirm with the user. Execute with `clawlink_call_tool`.
Check previews carefully and approve only specific note changes you intended.
Your OneNote connection and related requests may pass through ClawLink as the integration gateway.
The artifacts disclose that ClawLink is an external intermediary for the local device credential and OneNote tool access.
The resulting device credential is stored locally in OpenClaw's plugin config and is only sent to `claw-link.dev`.
Use this skill only if you trust ClawLink, confirm the URL before pairing, and avoid pasting raw credentials into chat.