Notectl

ReviewAudited by ClawScan on May 1, 2026.

Overview

Notectl appears to be a straightforward Apple Notes command guide, but it can read/search and change your Notes and depends on a local notectl command whose source is not provided.

Use this skill only if you are comfortable letting the agent use a trusted local `notectl` command to read, search, create, and append Apple Notes. Confirm the installed CLI and current folder list first, and approve any write action before it runs.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If invoked, the agent could display private note content or create/append notes in the user's Apple Notes database.

Why it was flagged

The skill exposes commands that read, search, and mutate Apple Notes. This matches the stated purpose, but these are still sensitive local-data operations that should be user-directed.

Skill content
`notectl show <title>` | Show note content by title ... `notectl add <title>` | Create a new note ... `notectl search <query>` | Search notes by title or content ... `notectl append <title>` | Append text to an existing note
Recommendation

Use the skill only for explicit Notes tasks, prefer specific folders/titles/queries, and review any `add` or `append` command before running it.

What this means

The skill itself does not install code, but the command it tells the agent to use depends on whatever `notectl` binary is available locally.

Why it was flagged

The runtime instructions rely on a `notectl` CLI, but the registry metadata provides no source/homepage provenance and does not declare the binary requirement.

Skill content
Source: unknown; Homepage: none; Required binaries ... none
Recommendation

Confirm that `notectl` is installed from a trusted source and is the intended binary before allowing the agent to run it.

What this means

Private note text may be exposed in the conversation or influence the agent's reasoning if retrieved.

Why it was flagged

Apple Notes content can be retrieved into the agent's context. Notes may contain private information or untrusted text, even though retrieval is purpose-aligned for this skill.

Skill content
`notectl show <title>` | Show note content by title ... `notectl search <query>` | Search notes by title or content ... # Search all notes
Recommendation

Retrieve only the notes needed for the task, avoid broad searches on sensitive topics, and treat note contents as user data rather than authoritative instructions.

What this means

The agent could assume folders exist when they do not, or use a stale folder list instead of checking the current system.

Why it was flagged

The hard-coded folder list is described as being from 'this system,' which may be stale or specific to the publisher rather than the installing user's Apple Notes environment.

Skill content
Folders on this system:
- Notes (default)
- research
- rainbat-projects
- Papi
Recommendation

Run `notectl folders` on the current machine and update or ignore the hard-coded folder list.