focusnoteapp
PassAudited by ClawScan on May 1, 2026.
Overview
The skill is coherent and purpose-aligned: it adds user-provided text to a local FocusNote daily note, though it does so by directly modifying FocusNote files.
This appears safe for its stated purpose, but it edits FocusNote's local files directly. Install or use it only if you are comfortable with the agent adding persistent entries to your FocusNote daily notes and with any required Node.js/npm setup.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill can change your local FocusNote daily note files by adding new bullet entries.
The skill directly writes node and structure JSON files in the FocusNote document store. This is aligned with the stated purpose, but it is local data mutation that should remain user-directed.
fs.writeFileSync(nodeFilePath, JSON.stringify(newNode, null, 2)); ... fs.writeFileSync(structurePath, JSON.stringify(structure, null, 2));
Use it only for text you intentionally want added, and consider backing up FocusNote data if you are concerned about direct file edits.
A user or agent may need to install or rely on the uuid npm package before the example script works.
The skill documentation references an external npm package, but the registry metadata and install specification do not declare required binaries or dependencies.
const { v4: uuidv4 } = require("uuid"); // npm install uuidVerify the dependency source before installing it, or prefer a reviewed implementation with declared and pinned dependencies.