Justanote

This skill appears to do what it says (manage local markdown notes) and asks for no credentials, but it relies on running shell commands that directly read and write files under a specific workspace path. Before enabling it: 1) Confirm where the notes directory is mapped on your host (the file mentions a mapping to /root/.openclaw/... which could expose host files). 2) Avoid putting secrets in notes. 3) Ensure agent runtime will validate and sanitize user-provided note paths, titles, and search terms (prevent .. path traversal and shell injection). 4) If you are concerned about exposure, test using a disposable or non-sensitive notes directory, or deny autonomous invocation until you review how inputs are escaped. 5) If you want stronger guarantees, request or implement explicit filename/path validation and quoting when the agent runs shell commands.