get笔记 英文名版

ReviewAudited by ClawScan on May 14, 2026.

Overview

This appears to be a legitimate Get笔记 notes integration, but it will use your API credentials to read, search, save, edit, delete, upload, and potentially share private notes.

Install this only if you trust Get笔记 and are comfortable giving the agent API access to your notes. Use it in private chats, confirm note edits/deletes/public shares before they happen, configure owner checks if available, and verify the external GitHub setup docs before entering credentials.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If configured, the agent can use the API key to read, search, and write notes in the connected Get笔记 account.

Why it was flagged

The skill uses Get笔记 account credentials and note access scopes to operate on the user's private note account.

Skill content
`Authorization: $GETNOTE_API_KEY` ... `X-Client-ID: $GETNOTE_CLIENT_ID` ... Scope 权限:`note.content.read`(读取)、`note.content.write`(写入)、`note.recall.read`(搜索)
Recommendation

Use a Get笔记 API key only in a trusted agent environment, grant the least permissions available, set `GETNOTE_OWNER_ID` in shared contexts, and revoke the key if you stop using the skill.

What this means

A mistaken or overly broad request could alter, remove, or publicly expose a private note.

Why it was flagged

The documented API operations include modifying notes, deleting notes to the recycle bin, and creating public sharing links.

Skill content
`POST ... /note/update` ... `POST ... /note/delete` ... `笔记移入回收站` ... `生成笔记的公开分享链接`
Recommendation

Before allowing edits, deletes, or sharing, check the note title/ID and ask for explicit confirmation, especially for public share links.

What this means

Private note contents may be brought into the agent conversation or model context when you search or view details.

Why it was flagged

Note detail responses can include full note text, audio transcripts/original text, media links, and saved webpage content that may be private.

Skill content
`content` | 正文(markdown) ... `audio` 字段:`play_url`、`duration`、`transcript`、`original` ... `web_page` 字段 ... `content`(链接原文)
Recommendation

Use the skill in private chats, avoid requesting more note content than needed, and do not display sensitive notes in group conversations.

What this means

Configuration instructions may depend on remote content that can change outside this packaged skill review.

Why it was flagged

The packaged OAuth reference is not complete and directs the user or agent to an external GitHub document that was not included in the reviewed artifacts.

Skill content
⚠️ 此文件内容获取失败,请访问 https://github.com/iswalle/getnote-openclaw/blob/main/references/oauth.md 获取完整内容。
Recommendation

Verify the GitHub source before following setup instructions, and never paste API keys into untrusted pages or prompts.