Manage notes, bookmarks, and notebooks using the nb CLI. Create, list, search, and organize notes across multiple notebooks with Git-backed versioning.
Security Analysis
high confidenceThe skill is an instruction-only wrapper for the nb CLI and its requirements and instructions are consistent with a local, Git-backed note tool; nothing requested or described is disproportionate to that purpose.
The skill requires the nb binary and the SKILL.md consistently documents nb usage and the ~/.nb notebook directory — this matches the described purpose. Minor inconsistency: the registry metadata lists no required config paths even though the instructions repeatedly reference and operate on ~/.nb/.
Instructions stay within the scope of a local note manager (running nb, git, cp, editing files under ~/.nb). One small contradiction: the file warns 'Never edit files in nb git repos by hand!' but the 'Common Patterns' section shows a manual cp into ~/.nb/ followed by git add/commit and an index rebuild. This is not a security red flag by itself but is confusing and could lead to accidental data loss or indexing issues.
Instruction-only skill with no install spec or downloads — lowest-risk footprint. It simply requires the nb CLI to already be present on PATH.
The skill declares no required environment variables or credentials, which is appropriate. Reminder: git-based operations (nb sync, nb git) will use the user's existing Git/SSH/credential-helper configuration to reach remotes, so network transmission of notes depends on your git remotes and credentials rather than this skill declaring secrets.
The skill does not request always:true or other elevated persistence. It is user-invocable and can be invoked autonomously per platform defaults — expected behavior for skills. No evidence it modifies other skills or global agent settings.
Guidance
This SKILL.md is an instructions-only wrapper around the nb CLI and appears internally consistent. Before installing or using it: 1) Ensure the nb binary you have on PATH is from the official project (review the GitHub repo/releases) because the skill will invoke that binary directly. 2) Understand that your notes live under ~/.nb/ and Git remotes used by nb sync will transmit data to whatever remotes you have configured — confirm those remotes are trusted. 3) Be cautious about the contradictory guidance: the doc warns not to edit files by hand but also shows a manual cp/git workflow; prefer using the nb CLI for changes to avoid indexing or commit issues and back up ~/.nb before trying manual operations. 4) No environment variables are required by the skill itself, but git operations will use your existing git/SSH credentials — review your git credential helpers and remotes if you have privacy concerns.
Latest Release
v1.0.2
- Added skill author and homepage to SKILL.md metadata. - No functional changes to CLI commands or documentation content. - Minor metadata enhancements for transparency and attribution.
More by @bjesuiter
Published by @bjesuiter on ClawHub
