Notes (Local, Apple, Notion, Obsidian & more)

Let your agent write notes anywhere: local markdown, Apple Notes, Bear, Obsidian, Notion, Evernote, configurable per note type.

Install this if you want an agent-managed notes workflow. Keep routing local for sensitive content, choose explicit activation instead of broad automatic capture, protect API tokens with restrictive permissions, and require review before remote writes or any delete command.

Type: OpenClaw Skill Name: notes Version: 1.1.3 The skill bundle is well-documented and explicitly outlines a secure design, including instructions for the agent to seek user consent for external platform use and credential access. However, its core functionality relies heavily on executing shell commands (`touch`, `grep`, `memo`, `grizzly`, `clinote`, `obsidian-cli`, `curl`) with arguments derived from user input, as demonstrated in `local.md`, `apple-notes.md`, `bear.md`, `evernote.md`, `notion.md`, and `obsidian.md`. If the OpenClaw agent does not rigorously sanitize user-controlled input before constructing and executing these commands, it introduces significant shell injection vulnerabilities, which could lead to arbitrary code execution. While there is no evidence of intentional malicious behavior (e.g., unauthorized data exfiltration, backdoors, or prompt injection to bypass security), the pervasive use of shell commands with user input makes the skill suspicious due to the high risk of unintentional RCE vulnerabilities.