Note Processor

PassAudited by ClawScan on May 1, 2026.

Overview

This skill appears to do what it claims: read a bounded local research-notes database and print summaries, keywords, searches, and topic lists.

This skill looks safe for its stated purpose. Before installing or using it, remember that it can read and display notes from ~/.openclaw/workspace/research_db.json, so do not use it with research notes containing secrets or sensitive personal information unless you intend to bring that content into the current session.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the research database contains sensitive notes or untrusted text, using this skill may display that content in the session for summarization or search.

Why it was flagged

The script reads a persistent local research database and then prints summaries, previews, keywords, and matching note content, so stored note text can enter the agent/user context when the skill is invoked.

Skill content
DB_PATH = Path.home() / ".openclaw" / "workspace" / "research_db.json"
Recommendation

Use it only on research notes you are comfortable exposing to the current agent session, and avoid storing secrets or untrusted instructions in the research database.