Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/iswalle/getnote-cli/getnote-authnpx skills add iswalle/getnote-cli --skill getnote-authgit clone --depth 1 https://github.com/iswalle/getnote-cliWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00059 | $0.01963 |
| Opus 5 | $0.00030 | $0.00981 |
| Sonnet 5 | $0.00012 | $0.00393 |
| Haiku 4.5 | $0.00006 | $0.00196 |
Grade A, and why
getnote-auth scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 81 lines — stays where its author put it; the contents beside it link to each section on GitHub.
得到大脑连接、诊断与升级
负责把“用户想用得到大脑”推进到真正可执行的状态。不要只说“已安装”：CLI 可执行、账号已授权、API 可读三项都通过才算连接成功。
首次安装闭环
按顺序执行，已经满足的步骤直接跳过：
- 用
command -v getnote检查 CLI；不要因为 Skill 已安装就假设 CLI 存在。独立的 ClawHub/OpenClaw Skill 由平台管理 CLI 依赖，不查找或运行scripts/install.sh。 - CLI 缺失时检查
node --version和npm --version，再自动执行npm install -g @getnote/cli@latest。这是 Agent 的工作，不要求用户手工复制命令；只有系统弹出安装授权时才请用户确认。 - 执行
getnote version，必须能够正常启动。 - 执行
getnote auth status。未登录时运行getnote auth login，让用户只在浏览器中确认，不索要 API Key、Cookie 或 Authorization。 - 执行
getnote doctor -o json。只有diagnostics_completed=true、ready=true且status=ready，才能宣布完整连接；ready=true,status=degraded表示核心能力可用但仍应处理警告。success和旧checks字段仅用于兼容。若未就绪，先处理issues[].blocking=true，再按next_actions[]修复。需要确认的动作不得静默执行。 - 在 Codex、Claude Code 或 Cursor 等本地 Agent 中，执行
getnote setup同步 5 个领域 Skill；如果当前平台已经由独立 Skill 包携带这些领域 Skill，或 CLI 明确提示未检测到受支持平台，不把这一步失败误报成账号连接失败。 - 先用
getnote notes --limit 1 -o json做无写入验收。只有用户同意创建测试内容时，才保存测试笔记。
日常路由
| 意图 | 命令 |
|---|---|
| 登录 | getnote auth login |
| 查看登录状态 | getnote auth status |
| 退出登录 | getnote auth logout |
| 诊断连接 | getnote doctor -o json |
| 查看 CLI 能力契约 | getnote capabilities -o json |
| 为本机 AI 同步领域 Skill | getnote setup |
| 查看 AI 对话额度 | getnote quota -o json |
| 查看版本 | getnote version |
| 检查升级 | getnote update --check |
| 执行升级 | getnote update |
参数不确定时读取对应命令的 --help，不要凭旧文档猜参数。
每条命令的结果与下一步
| 命令 | 成功后读取/确认 | 成功后怎么做 |
|---|---|---|
getnote auth login |
浏览器已确认，凭证已写入本机 | 再运行 doctor -o json；不在聊天中展示凭证。 |
getnote auth status |
Authenticated / Not authenticated 或环境变量登录状态 |
未登录才启动 auth login；状态里只能出现掩码。 |
getnote auth logout |
Logged out successfully. |
只说明本机已退出；不声称已撤销服务端授权。 |
getnote doctor -o json |
diagnostics_completed、local_ready、ready/status/summary、checks[]、issues[]、next_actions[]、update、integrations[] |
ready=true,status=ready 才表示完整可用；degraded 需继续处理警告。platforms[] 仅表示检测到应用或命令，不能证明 Skill 已安装；用 integrations[].skill_status/ready 判断 AI 接入状态。 |
getnote capabilities -o json |
contract_version、commands、command_aliases、command_results、guarantees |
只在安装、升级或兼容排查时读取；这是命令和结果字段的唯一事实源。 |
getnote setup -o json |
success、targets[]、installed_cli、installed_skills、authenticated、platforms[]、next_actions[]、next |
platforms[].status=installed 表示本地安装完成；verify_in_platform 表示 OpenClaw（小龙虾）或 QClaw 由平台管理，只引导用户完成对应的唯一 next_action。没有识别到 AI 平台不影响 CLI 和账号连接。 |
getnote quota -o json |
data.read/write/write_note 下的 daily/monthly.limit/used/remaining/reset_at |
按真实桶说明剩余额度，不自行换算或合并桶。 |
getnote version |
版本文本 | 只用于展示版本；机器契约仍以 capabilities -o json 为准。 |
getnote update --check |
当前/可用新版本文本 | 有新版本再运行 getnote update。 |
getnote update |
CLI 更新、Skills 同步和 doctor 验证结果 | 默认由新版 CLI 自动完成完整更新闭环；只有全部步骤成功才能说升级完成。只升级 CLI 时使用 --cli-only。 |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 81 lines · 59 tokens per session scan A 8ba5f29aa609
getnote-auth is a skill published in the GitHub repository iswalle/getnote-cli (175 stars, last pushed 8d ago), licensed MIT. It adds 59 tokens to every session and 1,963 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
use-agent-browser-for-airi
Test AIRI display-model imports with agent-browser across stage-tamagotchi Electron, stage-web, and stage-pocket mobile web layouts. Use when uploading and verifying contributor-supplied Live2D ZIP, VRM, or MMD ZIP/PMX/PMD files through AIRI's model selector, including onboarding bypass, format-specific import…
opencli-sitemap-author
Use when creating or maintaining OpenCLI site sitemaps: agent-facing navigation, page-state, action, workflow, API-reference, pitfall, and fallback knowledge for a website. Use after browser exploration discovers durable site context, when a sitemap is stale, or when promoting local site knowledge into the repo.
debug-optimize-lcp
Guides debugging and optimizing Largest Contentful Paint (LCP) using Chrome DevTools MCP tools. Use this skill whenever the user asks about LCP performance, slow page loads, Core Web Vitals optimization, or wants to understand why their page's main content takes too long to appear. Also use when the user mentions…
pinchtab-mcp
Use this skill when a task requires browser automation through PinchTab's MCP server connected to a remote browser instance. Covers navigation, element interaction, data extraction, form filling, multi-step flows, and session management via MCP tools.
traceway-setup
Analyze and instrument repositories for Traceway observability. Use when the user wants to plan, add, migrate, or verify Traceway or OpenTelemetry monitoring for backend, browser, full-stack, mobile or iOS, or AI-agent software, including project topology and user-approved setup-plan creation. Backends use OTLP/HTTP…
southwest
Search Southwest Airlines fares and points pricing via Patchright browser automation. SW is not in any GDS or API. Covers all fare classes, Companion Pass value, and fare drop monitoring.