NoteTaker Pro

AI-powered note-taking assistant that captures, cleans, tags, organizes, and indexes text, voice, paste, and photo notes for easy search and recall.

What to check before installing and using NoteTaker Pro: - Verify the source: the package claims a Codex/OpenAI audit and a vendor (NormieClaw) but the skill's source/homepage are unknown. Treat audit claims as unverified unless you can confirm them from the vendor. - Confirm network/remote behavior: the SKILL.md can call 'web_fetch' for pasted URLs and describes an optional dashboard sync (Supabase). If you enable any dashboard/sync in the future, that will require credentials and network access — review those components separately before enabling. - Inspect included scripts: scripts/export-notes.sh enforces exporting only into data/exports and uses python3 to resolve paths; it appears to restrict writes to the workspace. If you plan to run it, review it yourself and run it under an account that has limited privileges. - Be aware of data stored locally: the agent will capture everything users send (including sensitive data) into data/notes/. Make sure the agent workspace is on a machine/storage you control, set appropriate filesystem permissions (the package recommends chmod 700/600), and have a data deletion/backups plan. - Prompt-install step: the SETUP-PROMPT asks you to paste a setup block into the agent chat to 'install' and internalize instructions. This is how many skills bootstrap, but only paste it into an agent/session you trust; do not paste setup blocks into third-party or public agents. - Audit and logging: if you need higher assurance, (1) run a quick grep for any outbound network calls in the workspace, (2) run the skill in a sandboxed agent session first, and (3) if you enable dashboard sync later, review the specific sync code and credentials required. Given the contents, the package is coherent with its stated purpose and does not request disproportionate privileges, but exercise normal caution about origin, claims of audits, and enabling any optional networked components.

Type: OpenClaw Skill Name: normieclaw-notetaker-pro Version: 1.0.3 NoteTaker Pro is a well-structured note-taking skill that handles text, voice, and image inputs. The skill includes explicit security instructions in SKILL.md to defend against prompt injection by treating all ingested content as untrusted data. The only executable component, scripts/export-notes.sh, is a robust utility for exporting notes that includes strong path-traversal protections and enforces strict file permissions (chmod 600/700). No evidence of data exfiltration, malicious execution, or intentional vulnerabilities was found.