ClawHub

macOS Notes

v1.0.0

Create, read, search, and manage macOS Notes via AppleScript. Use when the user asks to take a note, jot something down, save an idea, create meeting notes,...

⭐ 0· 711·2 current·2 all-time
byLuca@lucaperret
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (manage macOS Notes via AppleScript) match what the files and SKILL.md do. Required binaries (osascript, python3) are appropriate and nothing unrelated (no cloud creds, no foreign services) is requested.
ℹ
Instruction Scope
Runtime instructions only call the bundled script which uses AppleScript to read/create/search notes. All actions are local. Important: the skill logs actions (timestamp, command, note title) to logs/notes.log in the skill directory, which may persist sensitive titles or metadata — the README does disclose this. The script also launches Notes.app if not running and will require macOS automation permissions.
✓
Install Mechanism
No install spec (instruction-only) and only local script files are included. Nothing is downloaded or extracted from external URLs, so install risk is low.
✓
Credentials
No environment variables or credentials are required. Use of SKILL_DIR to locate logs/scripts is expected; the script does not attempt to read unrelated config or secrets.
✓
Persistence & Privilege
always:false and user-invocable:true (normal). The skill does not request persistent system-wide privileges or modify other skills. It writes an append-only local log under the skill directory (expected behavior).
Assessment
This skill runs locally on macOS and uses AppleScript (osascript) and python3 — you will likely be prompted to allow automation/accessibility when it first calls Notes.app. It writes an append-only log (logs/notes.log) containing timestamps, commands and note titles in the skill directory; avoid storing secrets in note titles or bodies if you don't want them retained in that log (or edit the script to stop logging). No network calls or extra credentials are requested, but review the script if you want to verify exact behavior or remove logging before use.

Like a lobster shell, security has layers — review code before you run it.

latestvk97fs9rt8ajqw76jmxp6ggpxq181bbs8

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📝 Clawdis
OSmacOS
Binsosascript, python3

Comments