Apple Notes
PassAudited by ClawScan on May 1, 2026.
Overview
This skill clearly does what it says—manage Apple Notes through a macOS CLI—but users should understand it can access and change private notes.
This skill appears purpose-aligned and transparent. Before installing, confirm that you trust the external `memo` CLI and are comfortable granting it Apple Notes Automation access. Use care with delete, move, edit, and export commands, especially for sensitive notes.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The tool may be able to read or modify personal notes once macOS Automation access is granted.
Granting Automation access to Notes.app gives the CLI delegated authority to interact with the user's Apple Notes data.
For automation, grant permissions in System Settings > Privacy & Security > Automation.
Install only if you want Clawdbot to manage Apple Notes, and revoke Notes.app Automation permission later if you no longer need it.
A mistaken or misunderstood command could change, delete, move, or export a note.
The skill exposes commands that can mutate, delete, move, and export user notes. These actions are disclosed and purpose-aligned, but they can have user-visible impact.
Create, view, edit, delete, search, move notes between folders, and export to HTML/Markdown.
Use explicit instructions for destructive actions, and confirm the target note before deleting, moving, editing, or exporting.
You are trusting the external `memo` package to handle Apple Notes safely.
The skill depends on an external Homebrew tap for the `memo` CLI, while the registry source is listed as unknown and no code files are bundled for review.
Install (Homebrew): `brew tap antoniorodr/memo && brew install antoniorodr/memo/memo`
Review the linked project and Homebrew formula before installing, especially because the tool may receive Notes.app Automation access.
Private note contents could be brought into the agent conversation or exported if the user requests those actions.
The skill can retrieve and export persistent Apple Notes content, which may include private information or text that should be treated as user data rather than instructions.
List all notes: `memo notes`; Search notes (fuzzy): `memo notes -s "query"`; Export to HTML/Markdown: `memo notes -ex`
Avoid asking the agent to list or export sensitive notes unless needed, and treat note contents as data rather than instructions for the agent to follow.