MH apple-notes

ReviewAudited by ClawScan on May 1, 2026.

Overview

This skill coherently manages Apple Notes through a third-party CLI, but users should understand it can read, export, edit, move, and delete their notes after macOS Automation access is granted.

Install this only if you trust the memo CLI and are comfortable granting it access to Apple Notes. Use specific requests where possible, review prompts before editing or deleting notes, and revoke Notes.app Automation access if you stop using it.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used incorrectly, the agent could change, move, export, or delete Apple Notes when the user intended only to view them.

Why it was flagged

The skill exposes note-management actions, including modifying and deleting local Apple Notes. This is expected for the skill's purpose, but it can affect user data.

Skill content
Create, view, edit, delete, search, move notes between folders, and export to HTML/Markdown.
Recommendation

Use the skill only for requested note-management tasks and confirm before edit, move, export, or delete operations.

What this means

Once permission is granted, the CLI can access and manage Apple Notes available to that macOS user.

Why it was flagged

Granting Automation access allows the memo CLI to interact with Notes.app under the user's macOS account.

Skill content
macOS-only; if prompted, grant Automation access to Notes.app.
Recommendation

Grant Automation access only if you trust the memo CLI and revoke it in System Settings if you no longer use the skill.

What this means

Installing the skill's dependency installs third-party software on the user's Mac.

Why it was flagged

The skill depends on an external Homebrew tap and CLI package rather than bundled code. This is normal for a CLI wrapper, but it means trust in the upstream package matters.

Skill content
Install (Homebrew): `brew tap antoniorodr/memo && brew install antoniorodr/memo/memo`
Recommendation

Review the linked memo project and Homebrew formula before installation, especially in managed or sensitive environments.

What this means

Private Apple Notes content could be displayed, processed, or exported during normal use of the skill.

Why it was flagged

The skill can retrieve or export local note content, which may include private or sensitive information and may be brought into the agent's working context.

Skill content
List all notes: `memo notes` ... Search notes (fuzzy): `memo notes -s "query"` ... Export to HTML/Markdown: `memo notes -ex`
Recommendation

Ask for specific notes or folders where possible, and avoid listing or exporting broad note collections unless needed.