Apple Notes 1.0.0

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent Apple Notes helper, but it requires trusting the external memo CLI and granting it permission to read and change your Notes.

Install this only if you trust the memo project and Homebrew tap. Be careful when granting Automation access to Notes.app, and confirm destructive actions like delete or move before letting the agent proceed.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent could help edit, move, export, or delete Apple Notes when asked, so incorrect instructions or accidental command selection could affect personal notes.

Why it was flagged

The skill exposes mutating and destructive Apple Notes operations through the memo CLI. This is aligned with the stated purpose and described as interactive, but mistaken use could alter or remove notes.

Skill content
Create, view, edit, delete, search, move notes between folders, and export to HTML/Markdown... Delete a note: `memo notes -d`
Recommendation

Review note titles and actions before allowing edit, move, export, or delete operations, and keep backups if the notes are important.

What this means

The installed CLI may be able to read or modify Apple Notes through the macOS Automation permission.

Why it was flagged

Granting Automation access delegates control of Notes.app to the memo CLI. That permission is expected for this skill but gives the tool access to personal Notes data.

Skill content
macOS-only; if prompted, grant Automation access to Notes.app... grant permissions in System Settings > Privacy & Security > Automation.
Recommendation

Grant Automation access only if you are comfortable with the memo CLI controlling Notes.app, and revoke the permission in macOS settings when no longer needed.

What this means

Installing the skill requires installing and trusting the external memo CLI package.

Why it was flagged

The skill relies on an external third-party Homebrew formula for its runtime functionality. This is the advertised install path and fits the purpose, but trust is placed in that package source.

Skill content
brew | formula: antoniorodr/memo/memo | creates binaries: memo
Recommendation

Verify the Homebrew tap and project homepage before installing, and keep the package updated from a trusted source.