Notes Reminders

Manage quick notes and time-based reminders.

Security Scan

The skill's instructions expect Node scripts and channel posting (looks like Slack) but the package provides no scripts, no Node requirement, and requests no credentials — these mismatches make the skill incoherent and risky to install as-is.

Purpose & Capability

The skill claims to manage notes and reminders, which plausibly requires local scripts and a way to post reminder messages to a channel. However the registry lists no code files and no required environment variables or binaries. The SKILL.md's metadata references scripts (scripts/notes.js, scripts/reminders.js) that are not present in the manifest — this is a direct mismatch between claimed capability and provided artifacts.

Instruction Scope

Runtime instructions tell the agent to run 'node scripts/notes.js' and 'node scripts/reminders.js', including a check-and-fire flow that sends messages to a channel ID (C0AHBLQ0P32). The instructions do not explain how channel posting is authenticated or which service (Slack or other) is being used. They also assume a Node runtime is available but no binary requirement is declared. Directing the agent to execute non-existent scripts and to post messages to an external channel is out of scope for the provided package.

Install Mechanism

There is no install spec (instruction-only), which is low-risk in general. But because the SKILL.md references local scripts that are missing, an agent might fail or attempt to fetch/run other commands at runtime. The absence of included scripts is an integrity problem rather than an installer risk.

Credentials

The skill declares no required environment variables or primary credential, yet its workflow requires sending messages to a channel (channel ID format resembles Slack). Posting to channels normally requires API tokens (e.g., SLACK_BOT_TOKEN) and possibly additional config. The omission of any credential requirements is disproportionate and unexplained.

Persistence & Privilege

always is false and the skill does not request elevated persistence. Autonomous invocation is allowed but that is the platform default; there are no indicators the skill seeks permanent system-wide privileges.

What to consider before installing

Do not install this skill as-is. The SKILL.md expects Node scripts (scripts/notes.js, scripts/reminders.js) that are not included and describes sending reminder messages to a channel ID without declaring any API/token requirements. Ask the publisher for the full source (the scripts), an explanation of which messaging service the channel ID refers to, and which environment variables (e.g., SLACK_BOT_TOKEN) are required. Verify the scripts' contents before running them. If you need this functionality, prefer a skill that includes code or a hosted integration with clear auth instructions. If you must test, run in a strict sandbox and do not provide production credentials until you have reviewed the code.

メモとリマインダーの管理。

メモ

# メモ追加
node scripts/notes.js add --title="アイデア" --content="新機能のアイデア..."

# メモ検索
node scripts/notes.js search --query="アイデア" --limit=10

リマインダー

# リマインダー追加
node scripts/reminders.js add \
  --message="ミーティング準備" \
  --remind_at="2026-02-25T10:00:00+09:00" \
  --channel=C0AHBLQ0P32

# 未発火リマインダー一覧
node scripts/reminders.js list

# 発火チェック（期限到来のリマインダーを取得）
node scripts/reminders.js check-and-fire

リマインダー発火ワークフロー

check-and-fire の結果に fired リマインダーがあれば、該当チャネルにメッセージを送信: リマインダー: {message}

時刻の扱い

ユーザーが「明日10時にリマインドして」等と言った場合:

• Asia/Tokyo タイムゾーンで解釈
• ISO 8601 形式に変換して --remind_at に渡す