Install
$ agentstack add skill-flc1125-skills-getnote ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
Get 笔记
Operate on Get 笔记 through its OpenAPI with a default execution path, local auth-file assumptions, and explicit handling for async note creation.
Operating Mode
Act as a Get 笔记 operator, not as a generic REST client.
Prioritize:
- successful note operations through the bundled
.mjsscripts - correct routing between text, link, image, search, list, tag, and knowledge flows
- treating note IDs and cursors as strings to avoid JavaScript precision loss
- assuming auth is already configured unless execution proves otherwise
- concise recovery steps when auth or membership blocks execution
- safe handling of uploaded images, remote URLs, and local config files
Default scope for this skill:
- save text notes
- save link notes with async task polling
- save image notes from a local file through the signed upload flow
- list, inspect, update, and delete notes
- semantic recall across notes and knowledge bases
- add and delete note tags
- list, create, and manage knowledge bases and their note membership
- start OAuth device flow only when auth is missing or when the user explicitly asks to configure Get 笔记
Default non-goals:
- maintaining a full SDK abstraction layer
- background retries without user intent
- auto-writing secrets before an auth failure occurs
- broad scraping or arbitrary remote file fetching outside Get 笔记's intended upload flow
Resource Map
Read only the files you need:
- auth posture and secret handling: [references/auth-and-safety.md](references/auth-and-safety.md)
- local auth file schema and recovery steps: [references/config-schema.md](references/config-schema.md)
- note creation and async task rules: [references/save.md](references/save.md)
- semantic recall behavior: [references/search.md](references/search.md)
- note listing, detail, update, and delete rules: [references/list.md](references/list.md)
- knowledge base workflows: [references/knowledge.md](references/knowledge.md)
- tag workflows: [references/tags.md](references/tags.md)
- OAuth device flow details: [references/oauth.md](references/oauth.md)
- error codes, rate limits, and ID handling: [references/api-details.md](references/api-details.md)
Assume the local auth file already exists and is valid when the user asks to perform a Get 笔记 action. Only read [references/config-schema.md](references/config-schema.md) after execution fails because auth is missing or malformed.
Core Routing
Choose the smallest workflow that satisfies the request.
Save a Note
Use for requests such as:
- "记一下这段话"
- "把这个链接存到笔记"
- "把这张图保存到 Get 笔记"
Sequence:
- Classify the input as
plain_text,link, orimg_text. - Read [references/save.md](references/save.md) before building the request.
- Use
scripts/getnote.mjs. - For image notes:
- if the user provides a local image, let the script upload it first
- do not route arbitrary or pre-hosted image URLs through the bundled script
- For link and image notes, treat creation as async:
- return or inspect
task_id - poll until
successorfailedwhen the user wants the full result now
- When polling succeeds, follow with note detail if the user needs the generated summary or source details.
Search Notes
Use for requests such as:
- "搜一下我记过的 RAG"
- "在这个知识库里找产品方案"
Sequence:
- Decide between global recall and knowledge recall.
- Read [references/search.md](references/search.md).
- Use
scripts/getnote.mjs searchorscripts/getnote.mjs search-knowledge. - Prefer returning the most relevant titles, snippets, and timestamps first.
List Or Inspect Notes
Use for requests such as:
- "最近有哪些笔记"
- "看一下这条笔记详情"
- "更新这条纯文本笔记"
Sequence:
- Read [references/list.md](references/list.md).
- Use
scripts/getnote.mjs list-notes,note-detail,update-note, ordelete-note. - Preserve note IDs as strings and pass them through unchanged.
- Only update plain-text notes unless the API clearly supports another note type for that route.
Manage Knowledge Or Tags
Use for requests such as:
- "把这条笔记加到知识库"
- "创建一个知识库"
- "给这条笔记加标签"
Sequence:
- Read [references/knowledge.md](references/knowledge.md) or [references/tags.md](references/tags.md).
- Use the matching
scripts/getnote.mjssubcommand. - For knowledge writes, identify the exact
topic_idfirst instead of guessing. - For tag deletion, use the concrete
tag_id, not only the tag name.
Configure Or Recover Auth
Use only when:
- the user explicitly asks to configure Get 笔记
- a live request fails because auth is missing, invalid, or malformed
Sequence:
- Read [references/auth-and-safety.md](references/auth-and-safety.md).
- If the user wants OAuth device flow, read [references/oauth.md](references/oauth.md) and use:
scripts/getnote.mjs oauth-device-code --executescripts/oauth-poll.mjs
- If the user wants local static config, read [references/config-schema.md](references/config-schema.md) and guide them to create
auth.json. - Do not proactively ask the user to configure auth before execution proves it is necessary.
Execution Rules
- Use
scripts/getnote.mjsas the default execution path for normal API operations. - Use preview mode by default. Pass
--executeonly when the user clearly wants the real action. - Read [references/auth-and-safety.md](references/auth-and-safety.md) before any live execution.
- When a command fails with missing auth, point to [references/config-schema.md](references/config-schema.md) rather than inventing a new secret storage model.
- When a command fails with membership or quota errors, surface the exact API reason and stop instead of retrying blindly.
Script Map
scripts/getnote.mjs: main operator for note, search, knowledge, tag, and OAuth device-code requestsscripts/oauth-poll.mjs: focused device-flow token polling helperscripts/common.mjs: shared auth loading, safe JSON parsing, request helpers, and preview formatting
Decision Rules
- Treat
id,note_id,next_cursor,parent_id,follow_id, andlive_idas strings. - Do not recommend configuration until a real execution path proves auth is missing or broken.
- Prefer the local auth file over inline secrets.
- Allow CLI or env overrides only for one-off execution when the user explicitly wants them.
- Do not echo API keys or signed OSS credentials.
- Do not fetch arbitrary third-party URLs locally just to create an image note.
- When the request is ambiguous between note search and knowledge search, resolve the target before writing or searching.
- When a link or image save returns a
task_id, do not claim the note is complete until task polling confirms success.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: flc1125
- Source: flc1125/skills
- License: MIT
- Homepage: https://skills.flc.io
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.