notetaker-pro

AI note-taking assistant that captures, cleans, organizes, tags, and indexes text, voice, paste, and photo inputs for instant, searchable notes.

This package looks like a legitimate note-taking skill, but do not run its setup blindly. Before installing: 1) Inspect SETUP-PROMPT commands and avoid pasting the whole block directly into an agent — run the mkdir/chmod/cp steps yourself from a trusted shell and verify the paths the find commands match. 2) Disable or restrict automatic URL fetching: require explicit confirmation before the agent fetches any user-supplied URL, add an allowlist, and block loopback/private addresses to avoid SSRF. 3) Confirm you are comfortable granting the agent network access at all (the skill can operate locally; networked dashboard/sync features are optional and will require separate credentials). 4) Review scripts/export-notes.sh and run it in a controlled environment (it contains safety checks but should be audited in your environment). 5) Remember the SKILL.md includes prompt-injection defense wording (it intentionally contains phrases like 'ignore previous instructions' to teach the agent to ignore such content) — that flagged scanners but is defensive. If you need higher assurance, consider running the agent with limited network permissions or manually implementing the recommended URL safety policy and tightening the setup copy workflow before enabling the skill.

Type: OpenClaw Skill Name: notetaker-pro Version: 1.0.0 NoteTaker Pro is a well-structured note-taking skill that includes multi-modal intake, auto-organization, and export capabilities. The bundle demonstrates significant security awareness, featuring explicit prompt-injection defenses in SKILL.md and path-traversal protections within the export script (scripts/export-notes.sh). The setup process (SETUP-PROMPT.md) correctly implements restrictive file permissions (chmod 600/700) for user data. While the skill possesses high-privilege capabilities like web fetching and shell execution, these are functionally justified and accompanied by safeguards, with no evidence of malicious intent or unauthorized data exfiltration.