Agent Economy ReportAgent Economy ReportCAUTION version 1.0.0 · audited 2026-09-17
This package is a set of instructions for using an external macOS command-line tool called memo to manage Apple Notes. It tells an agent to install that tool with Homebrew or pip, then run commands to list, create, view, edit, delete, move, search, and export notes. The package itself contains no executable payload, hidden network calls, credential harvesting, wallet access, or persistence. The main concerns are that it installs an unpinned third-party CLI, asks for Apple Notes Automation access, and includes destructive note commands. A careful user should review and pin the memo tool and require confirmation before note deletion or editing.
| Declared purpose | Manage Apple Notes via the memo CLI on macOS, including create, view, edit, delete, search, move, and export operations. |
| Observed behavior | The package consists primarily of skill metadata, usage instructions, and command examples. It declares a dependency on the external memo binary and instructs installation through Homebrew or pip. It then documents shell commands such as memo notes for listing, creating, editing, deleting, moving, and exporting notes. It also discloses risks around the unpinned third-party CLI, Apple Notes Automation access, and destructive operations. |
| Verdict, rules only | SAFE |
| Verdict, AI | CAUTION |
| Final verdict | CAUTION (never better than either pass) |
| capability | vs purpose | detail |
|---|---|---|
| shell | needed | The skill instructs an agent to run commands such as brew tap, brew install, pip install, and memo notes subcommands to install and use the CLI. |
| network | needed | Installation using Homebrew or pip fetches the external memo project from repositories; the skill links to clawhub.ai and github.com, but no hidden automatic network calls were observed. |
| filesystem_read | needed | The memo CLI manages existing Apple Notes data; operations such as list, search, view, and export require reading note contents. |
| filesystem_write | needed | Exporting notes to HTML or Markdown with memo notes -ex writes note content to files, and installation writes the CLI to the system. |
| install_packages | needed | The skill declares a Homebrew install and also documents pip install . after cloning the repository. |
| other | needed | The skill requires macOS Automation permission for Apple Notes.app so the CLI can access and modify notes. |
| severity | finding |
|---|---|
| info | Declared purpose States that the skill is intended to manage Apple Notes through the memo CLI. SKILL.md:3 description: Manage Apple Notes via the `memo` CLI on macOS (create, view, edit, delete, search, move, and export notes). Use when a user asks Clawdbot to add a |
| info | External GitHub repository Points to the external repository for the memo CLI; no automatic connection from this package was observed. SKILL.md:4 homepage: https://github.com/antoniorodr/memo |
| info | Skill metadata declares memo dependency and Homebrew install The metadata says the skill requires the external memo binary and provides a Homebrew install formula. SKILL.md:5 metadata: {"clawdbot":{"emoji":"📝","os":["darwin"],"requires":{"bins":["memo"]},"install":[{"id":"brew","kind":"brew","formula":"antoniorodr/memo/memo","bins":[ |
| medium | Installs third-party CLI via Homebrew tap This command installs an unpinned external CLI from a third-party tap; the skill card also acknowledges this risk. SKILL.md:13 Install (Homebrew): `brew tap antoniorodr/memo && brew install antoniorodr/memo/memo` |
| medium | Manual pip install from external repository This instructs installation from the repo after cloning. The installed code is not visible in this package and must be trusted separately. SKILL.md:14 Manual (pip): `pip install .` (after cloning the repo) |
| medium | Requests Apple Notes Automation permission Granting Automation access lets the external memo CLI read and modify Apple Notes data. SKILL.md:15 macOS-only; if prompted, grant Automation access to Notes.app. |
| low | Note editing command Provides a command that can modify existing notes. SKILL.md:28 Edit existing note: `memo notes -e` |
| medium | Note deletion command Provides a command that can delete notes. This is destructive and should require explicit confirmation. SKILL.md:32 Delete a note: `memo notes -d` |
| low | Folder move command Moves notes between folders. SKILL.md:36 Move note to folder: `memo notes -m` |
| low | Note export command Exports note content to HTML or Markdown files, which can copy note data outside Apple Notes. SKILL.md:40 Export to HTML/Markdown: `memo notes -ex` |
| info | External link to ClawHub publisher profile Contains a link to a ClawHub user profile. skill-card.md:9 [steipete](https://clawhub.ai/user/steipete) |
| medium | Author acknowledges unpinned CLI risk The skill card explicitly states that the dependency on memo is unpinned. skill-card.md:24 Risk: The skill depends on an unpinned third-party `memo` CLI installation. |
| medium | Automation access risk disclosed The skill card acknowledges that automation permission can expose or modify sensitive notes. skill-card.md:28 Risk: Apple Notes Automation access can expose or modify sensitive note contents. |
| medium | Destructive actions risk disclosed The skill card warns that delete and edit commands can change or remove notes. skill-card.md:32 Risk: Delete and edit operations can change or remove user notes. |
| info | Output includes shell commands The skill's output may contain shell commands for an agent to execute. skill-card.md:43 **Output Type(s):** [Text, Markdown, Shell commands, Configuration, Guidance] |
0 AI finding(s) were dropped because their file, line or quote did not match the package.
| domain | service rating | where |
|---|---|---|
| clawhub.ai | not in the service index | skill-card.md:9 |
| github.com | not in the service index | SKILL.md:4 |
| Binaries invoked | pip |
| Environment variables read | none |
| Hard-coded wallets | none |
| Pipes a download to a shell | 0 |
| eval / exec / subprocess | 0 |
| base64 blobs | 0 |
| File writes | 0 |
| Persistence | 0 |
| file | lines | sha256 |
|---|---|---|
SKILL.md | 50 | 493fde9a5e8df837… |
_meta.json | 6 | 87ebbc40ccd95f6b… |
skill-card.md | 57 | a6f874bde3bcdf65… |
For agents
JSON: https://agenteconomy.report/k/apple-notes.audit.json · badge: https://agenteconomy.report/k/apple-notes.audited.svg ·
skill rating: /k/apple-notes · commission an audit of any skill: US$ 29 per version.
The complete published package of this exact version was downloaded from the registry and read statically; nothing was executed. A deterministic pass extracts network destinations, binaries, environment variables, writes, install commands, obfuscation markers, subprocesses and wallets, each with file and line. An AI then reads the whole package with those facts and writes the summary, the capabilities and the findings under a strict schema; every finding it produces must cite a file, a line and the exact text, or it is dropped. The final verdict is the worst of the two passes. The audit does not change the skill's trust tier (policy); the author may respond through the dispute channel and the response is published here. Commissioned by: the Agent Economy Report (free program: the 150 most downloaded skills, September 2026).