ClawHub

RemNote Notes

v0.10.0

Search, read, and write RemNote notes and personal knowledge base content via `remnote-cli`. Use for note-taking, journaling, tags, and knowledge-base naviga...

⭐ 0· 402·0 current·0 all-time
by@robert7
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the actual requirements: the skill is an adapter around the remnote-cli binary and the SKILL.md only instructs the agent to run remnote-cli commands. Requiring the remnote-cli binary (and offering an npm install for it) is proportional to the stated purpose.
✓
Instruction Scope
Runtime instructions constrain the agent to run only remnote-cli commands, prefer read-only flows by default, and require explicit user confirmation ('confirm write') for mutating operations. The SKILL.md does not instruct reading unrelated files or environment variables outside of remnote-cli usage.
ℹ
Install Mechanism
Install uses npm (npm install -g remnote-cli). This is expected for a CLI distributed via npm but carries the usual moderate risk associated with third-party npm packages (global install affects system PATH). The install does not fetch code from an untrusted URL or IP; it references the package name and a GitHub repo as homepage.
✓
Credentials
No environment variables, config paths, or unrelated credentials are requested. The skill expects a RemNote browser/app session and the RemNote Automation Bridge plugin — these are reasonable for a tool that manipulates a user's RemNote content.
✓
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system-wide agent settings, and is user-invocable. It does require running a long-lived remnote-cli daemon, which is appropriate for this use case.
Assessment
This skill appears to be what it says: a wrapper around remnote-cli. Before installing, verify the remnote-cli npm package and its GitHub repo (maintainer, recent commits, issues) because npm packages run code on your machine and a global install affects PATH. Be aware remnote-cli interacts with the RemNote Automation Bridge and your open RemNote session, so it can read and (with your explicit confirm) modify your notes — only grant write permission when you trust the package. If you are cautious about autonomous agent behavior, keep the skill user-invocable (do not enable always:true) and consider disabling autonomous invocation or require explicit confirmation for writes in your agent policy.

Like a lobster shell, security has layers — review code before you run it.

latestvk9758f38ve043fkny9keb3pa2583bpmq

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🌀 Clawdis
Binsremnote-cli

Install

Install remnote-cli (npm)
Bins: remnote-cli
npm i -g remnote-cli

Comments