Atomic Agent is a local-first AI agent that runs its control loop and state on a user's machine while using local or cloud models. It drives browsers, edits files, runs approved commands, remembers context, schedules follow-ups, and connects to external tools, with the catalogue providing skills for its use.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add AtomicBot-ai/atomic-agent --skill apple-notesgit clone --depth 1 https://github.com/AtomicBot-ai/atomic-agentWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/atomicbot-ai/atomic-agent/apple-notes)<a href="https://agentmods.dev/skills/atomicbot-ai/atomic-agent/apple-notes"><img src="https://agentmods.dev/badge/skills/atomicbot-ai/atomic-agent/apple-notes/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/atomicbot-ai/atomic-agent/apple-notes"><img src="https://agentmods.dev/badge/skills/atomicbot-ai/atomic-agent/apple-notes.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Privilege Escalation · line 56 Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.Fix: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation is needed, document the justification and scope.
- medium Excessive Agency · line 126 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00027 | $0.01299 |
| Opus 5.5 | $0.00011 | $0.00520 |
| Sonnet 5.5 | $0.00005 | $0.00260 |
| Haiku 4.5 | $0.00003 | $0.00130 |
Grade B, and why
apple-notes scanned grade B with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
If `brew` itself is missing (`exit != 0`, `command not found: brew`), do NOT attempt to install Homebrew automatically — that requires `sudo` and a network curl-pipe-bash. Reply with: "You don't have Homebrew installed. Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
If `brew` itself is missing (`exit != 0`, `command not found: brew`), do NOT attempt to install Homebrew automatically — that requires `sudo` and a network curl-pipe-bash. Reply with: "You don't have Homebrew installed. How it starts
The opening of the file, as written. The whole thing — 127 lines — stays where its author put it; the contents beside it link to each section on GitHub.
apple-notes
Drive Apple Notes from the terminal via memo. Notes sync across Apple devices through iCloud.
Setup check (lazy — do NOT probe every turn)
Do not run a memo --version probe before each request. Just run the
memo command the user asked for directly. Only when a command fails
map the error to a Setup playbook branch:
- stderr mentions
command not found/memo: command not found→ Setup playbook → "memo is not installed". - stderr mentions
osascript/ "Not authorized to send Apple events to Notes" → Setup playbook → "Automation permission denied". - macOS not detected (e.g.
unamereturnsLinux) → reply that this skill is macOS-only and stop. Do NOT try to install anything.
If unsure which branch applies, capture the actual stderr and ask the user before proceeding — never assume.
Setup playbook (when prerequisites are missing)
When a check fails, the agent's job is to OFFER concrete help and EXECUTE the fix itself — not to dump install instructions on the user. Use this dialogue shape:
- State plainly what is missing (one short reply).
- Offer the most direct remediation the agent can perform via tools.
- Wait for the user's yes/no reply.
- On yes, execute the fix (the runtime approval gate will surface the command for confirmation).
- Retry the original request; only then proceed.
memo is not installed
Reply (solo reply step):
"The
memoutility is not installed. I can install it myself via Homebrew (brew install antoniorodr/memo/memo); it needs your confirmation and takes ~30 seconds. Install it?"
If user agrees, execute as two consecutive solo steps:
[{ "tool": "os.shell.run", "args": { "cmd": "brew", "args": ["tap", "antoniorodr/memo"] } }]
[{ "tool": "os.shell.run", "args": { "cmd": "brew", "args": ["install", "antoniorodr/memo/memo"] } }]
After both succeed, retry the original command.
If brew itself is missing (exit != 0, command not found: brew), do NOT attempt to install Homebrew automatically — that requires sudo and a network curl-pipe-bash. Reply with: "You don't have Homebrew installed. I can't install it automatically — that requires sudo and an interactive install. Install it manually from https://brew.sh/, then I'll continue."
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 127 lines · 27 tokens per session scan B 1837ee149cb1
apple-notes is a skill published in the GitHub repository AtomicBot-ai/atomic-agent (3,387 stars, last pushed yesterday), licensed MIT. It adds 27 tokens to every session and 1,299 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it B with 2 findings (asks for root, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
hunk-launch-video
Produces Hunk videos by driving the real TUI headlessly in a PTY, compositing captioned 1080p frames in Chromium, and encoding with ffmpeg. Use for feature demos, workflow explainers, announcements, launch videos, and full-release roundups.
Agent Browser Automation
Fast Rust-based headless browser automation CLI with Node.js fallback for AI agents, featuring navigation, clicking, typing, snapshots, and structured commands optimized for agent workflows.
amq-spec
Use two agents to research a design independently and converge on one specification through AMQ. Trigger for collaborative design or messages labeled workflow:spec; use amq-cli for ordinary coordination.
scheduling
Scheduling across time zones: confirm times in the attendee's own zone, use IANA zone names, mind DST edges, buffers and calendar etiquette. Use when booking meetings or calls with people in other zones.
agent-desktop
Use the built-in Computer sub-agent with agent-desktop for macOS desktop automation. Apply when a task needs application launching, accessibility snapshots, stable element refs, window focusing, semantic clicks/typing, or visual confirmation outside the browser sandbox.
neosh
Run and manage long-lived coding agents in a neosh workspace from the command line — start conversations in any directory or git worktree, fan work out across many at once, watch and steer them while they run, read what they produced, and clean up. Use whenever the user asks to delegate work to neosh, run something…