ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Apple Notes 1.0.0

v1.0.0

Manage Apple Notes via the `memo` CLI on macOS (create, view, edit, delete, search, move, and export notes). Use when a user asks Clawdbot to add a note, lis...

⭐ 0· 513·7 current·8 all-time
by@readbyte-ai
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description, declared required binary ('memo'), homepage (GitHub repo), and the SKILL.md instructions all align: the skill simply instructs the agent to call the memo CLI to manage Apple Notes.
✓
Instruction Scope
SKILL.md only instructs using memo commands (list, add, edit, delete, move, export) and to grant macOS Automation permission to Notes.app when prompted. There are no instructions to read unrelated files, request extra environment variables, or exfiltrate data to unexpected endpoints.
ℹ
Install Mechanism
Installation uses a Homebrew tap (antoniorodr/memo) and installs a binary named 'memo', which is appropriate for a CLI-based skill. As a caution: this is a third-party tap (not an official Homebrew core formula); users should verify the tap and the upstream GitHub repository before installing.
ℹ
Credentials
The skill requests no environment variables or credentials, which is proportional. However, it requires granting Automation access to Notes.app (macOS privacy permission), which gives the installed binary programmatic access to the user's notes — this is expected for the task but exposes sensitive personal data and should be considered before granting.
✓
Persistence & Privilege
The skill is not set to always:true, is user-invocable, and does not request persistent system-wide changes or access to other skills' configuration. Installing the memo binary is the only persistent artifact; autonomous invocation is enabled (default) but not excessive here.
Assessment
This skill appears to do what it says: it drives the 'memo' CLI to manage Apple Notes. Before installing, review the upstream GitHub repo (https://github.com/antoniorodr/memo) and the Homebrew tap to ensure you trust the source. Be aware that to function the memo binary may require Automation permission to control Notes.app — granting that permission allows the binary to read and modify your personal notes. If you want extra caution, install and run memo locally in a controlled environment first (or audit the installed binary), and revoke Automation permissions when you no longer need the skill.

Like a lobster shell, security has layers — review code before you run it.

latestvk977v6wzc4ry4pwzt0vke01pgs81rwry

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📝 Clawdis
OSmacOS
Binsmemo

Install

Install memo via Homebrew
Bins: memo
brew install antoniorodr/memo/memo

Comments