remi
v0.1.0Manage Apple Reminders via CLI with section support and iCloud sync. Use when the user asks to create, list, complete, search, or organize reminders.
⭐ 0· 33·0 current·0 all-time
byMatthew O'Riordan@mattheworiordan
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the declared requirement (the 'remi' CLI). No unrelated credentials, binaries, or config paths are requested. The mention of macOS 13+ and Reminders/iCloud access is appropriate for a Reminders management tool.
Instruction Scope
SKILL.md instructs the agent to run the 'remi' CLI (or 'npx @mattheworiordan/remi' if not on PATH) and to use --json for programmatic calls. It does not ask the agent to read unrelated files or environment variables. One operational note: interactive deletes require --confirm, but the doc says --confirm is not needed with --json — meaning automated calls (via --json) can perform deletions without an interactive confirmation, so automated workflows should take care to avoid accidental destructive actions.
Install Mechanism
The registry shows no formal install spec, but SKILL.md metadata references installing via a Homebrew tap (mattheworiordan/tap/remi) or npm (@mattheworiordan/remi). Those are plausible install routes for a CLI but come from a third-party author/tap; users should verify the tap/package and prefer official distribution channels. The skill itself does not download or write code (instruction-only), so on-disk installs would be performed by the user/environment, not the skill.
Credentials
No environment variables or credentials are requested. The only notable access is macOS Reminders permission and implicit iCloud syncing (account-level behavior), which are appropriate and expected for this functionality.
Persistence & Privilege
always:false and user-invocable:true (defaults) — the skill does not request permanent inclusion or modification of other skills. Model invocation is allowed (normal). There are no indications the skill attempts to alter agent-wide settings or other skills.
Scan Findings in Context
[NO_SCAN_FINDINGS] expected: The scanner found no code files to analyze (instruction-only SKILL.md). This is expected for an instruction-only CLI wrapper; absence of findings does not guarantee safety of third-party brew/npm packages referenced.
Assessment
This skill is coherent with its description, but take these practical precautions before installing/using it: 1) Verify the provenance of the 'remi' CLI (check the Homebrew tap and npm package author and reviews) before installing from third-party taps or registries. 2) Be aware that using --json in automation can perform deletes without interactive confirmation — test on non-critical lists or use IDs to avoid accidental removals. 3) macOS will ask for Reminders permission; granting it gives the CLI the ability to read and modify your reminders and those that sync via iCloud. 4) Prefer installing via the official Homebrew/npm entries (if you confirm them) rather than running untrusted binaries. If you want extra assurance, inspect the remi package source before installing.Like a lobster shell, security has layers — review code before you run it.
latestvk97f95bea09dppxyx6tq19y6gd847hhg
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binsremi