Mac Notes Agent
v1.1.0Integrate with the macOS Notes app (Apple Notes). Supports creating, listing, reading, updating, deleting, and searching notes via a simple Node.js CLI that bridges to AppleScript.
⭐ 1· 1.4k·6 current·6 all-time
bySwan C@swancho
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description claim a macOS Notes bridge via AppleScript; the provided cli.js implements exactly that using only Node built-ins and osascript. No unrelated binaries, env vars, or services are requested.
Instruction Scope
SKILL.md instructs running the included Node CLI which in turn runs osascript AppleScript snippets to read/modify Notes. It does not read other files or contact external endpoints. Caution: the CLI constructs AppleScript text from user-supplied inputs with only simple escaping (backslashes and double quotes); this can lead to malformed scripts or AppleScript injection edge-cases for specially crafted inputs — review/validate inputs if you plan to expose it to untrusted content.
Install Mechanism
No install spec; the skill is instruction-only with a single CLI file included. Nothing is downloaded or installed by the skill itself.
Credentials
The skill requests no credentials, env vars, or config paths. Its runtime requirement (macOS with osascript) is proportional to its purpose.
Persistence & Privilege
always is false and there is no special persistence. However, the agent (by default) may invoke this skill autonomously and the skill can create/modify/delete Notes — consider the risk of granting automation control over your Notes if you allow autonomous invocations.
Assessment
This skill appears to do what it claims: it runs AppleScript (via osascript) to operate on your Apple Notes. Before installing: (1) confirm you trust the skill author or inspect cli.js yourself (it's small and included); (2) be aware macOS will likely prompt to allow 'osascript' automation access to the Notes app — granting that lets the skill read and modify all Notes; (3) avoid passing untrusted input to the CLI (there is only basic escaping and edge cases could break or alter the generated AppleScript); and (4) if you don't want an agent to modify your Notes autonomously, restrict invocation to manual/user-invoked only. If you want extra assurance, run the CLI locally from a test account and review behavior before enabling it for automated use.Like a lobster shell, security has layers — review code before you run it.
latestvk970sc2hpd4gnx9ny5m0srvnqs80vzdj
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📝 Clawdis