Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Note Organizer

Joplin — Note Manager — personal knowledge base. Personal productivity tool. Use when you need Joplin capabilities for personal organization, tracking, or ma...

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 185 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The name/description (Joplin-style note manager) matches the included script: a simple local notes implementation providing create/list/search/view/edit/tag/export/trash/stats functionality. No unrelated credentials, services, or binaries are requested.
Instruction Scope
SKILL.md directs the agent to run scripts/joplin.sh and the script operates only on a local notes directory. Minor inconsistency: SKILL.md lists runtime: python3 even though the primary script is Bash (the script does call python3 only for the JSON export path). Otherwise the instructions do not read or transmit data outside the declared NOTES_DIR.
Install Mechanism
No install spec or remote downloads; this is instruction + included script only. Nothing is written to disk beyond the script itself and the notes directory the script creates/uses.
Credentials
No credentials or sensitive environment variables are requested. The only environment variable used is NOTES_DIR (optional) to set where notes are stored, which is proportional to the skill's purpose.
Persistence & Privilege
The skill does create and modify files under the user's $HOME by default (~/ .notes) which is expected for a note manager. It does not request always:true or modify other skills. Be aware that the agent (if allowed autonomous invocation) could create/modify notes without interactive confirmation.
Assessment
This skill is a small, local Bash script that manages notes in $NOTES_DIR (defaults to $HOME/.notes). It does not contact remote servers or request credentials. Before installing: review the script (it is short and readable), decide where you want notes stored by setting NOTES_DIR, back up any existing ~/.notes directory if present, and consider running it in a restricted user account or container if you prefer isolation. Note the SKILL.md runtime field lists python3 even though the tool is primarily bash (the JSON export uses python3) — ensure your agent invokes the provided script as instructed. If you do not trust the author, do not install or run the script on sensitive systems.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
latestvk9706z0ft8gbd3jb9mtjafj8r982trwn

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Note Organizer

Note Manager — personal knowledge base

Why This Skill?

  • Designed for personal daily use — simple and practical
  • No external dependencies — works with standard system tools
  • Data stored locally — your data stays on your machine
  • Original implementation by BytesAgain

Commands

Run scripts/joplin.sh <command> to use.

  • new — [title] Create new note
  • list — [n] List recent notes (default 10)
  • search<query> Full-text search
  • view<id> View a note
  • edit<id> <text> Append to note
  • tag<tag> List notes by tag
  • tags — Show all tags
  • notebook<name> List notes in notebook
  • notebooks — List all notebooks
  • export — [format] Export all (md/json/html)
  • trash<id> Move to trash
  • stats — Note statistics

Quick Start

joplin.sh help

Disclaimer: This is an independent, original implementation by BytesAgain. Not affiliated with or derived from any third-party project. No code was copied.


Powered by BytesAgain | bytesagain.com | hello@bytesagain.com

Files

3 total
Select a file
Select a file to preview.

Comments

Loading comments…