notes

notes is a skill for Claude Code, Codex from UnicomAI/wanwu. It costs 0 tokens per session (2,995 once invoked), scanned A, original, Apache-2.0.

A note-management skill for searching, reading, creating, and adding content to personal notes in IMA, a note and knowledge platform.

In plain words
What is it for?
Use it to find notes, browse notebooks, read note contents, create notes, or append content to a specified note.
Why use it?
It helps an agent choose correctly between creating a new note and adding to an existing one, while preserving text encoding and note privacy.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

Good fit Use it to find notes, browse notebooks, read note contents, create notes, or append content to a specified note.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/unicomai/wanwu/notes
About the project

Wanwu is an enterprise platform for building AI agents, workflows, retrieval-augmented applications, and managing models in multi-tenant environments. It is designed for developers and enterprise teams delivering AI applications and integrations. The catalogue entries provide skills and agents for using the platform.

UnicomAI/wanwu · 2,372 stars · on GitHub

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add UnicomAI/wanwu --skill notes
Clone the repo
git clone --depth 1 https://github.com/UnicomAI/wanwu

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for notes

README.md
[![agentmods](https://agentmods.dev/badge/skills/unicomai/wanwu/notes/github.svg)](https://agentmods.dev/skills/unicomai/wanwu/notes)
Your own site
<a href="https://agentmods.dev/skills/unicomai/wanwu/notes"><img src="https://agentmods.dev/badge/skills/unicomai/wanwu/notes/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for notes

Your own site · 80×15
<a href="https://agentmods.dev/skills/unicomai/wanwu/notes"><img src="https://agentmods.dev/badge/skills/unicomai/wanwu/notes.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 0 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,995 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector pass 7 Sept 2026
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00000 $0.02995
Opus 5.5 $0.00000 $0.01198
Sonnet 5.5 $0.00000 $0.00599
Haiku 4.5 $0.00000 $0.00299

Measured 1mo ago against content hash 0e57115fd6d9, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

notes scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

Copies of this mod

2 near-identical copies found in the catalogue:

  • notes — 100% identical, 0 lines differ
  • notes — 100% identical, 0 lines differ
configs/microservice/bff-service/configs/agent-skills/clawhub/ima-skills/notes/SKILL.md · 192 lines

How it starts

The opening of the file, as written. The whole thing — 192 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Notes (笔记)

⛔ Before ANY write (import_doc/append_doc): validate ALL string fields (content, title) are legal UTF-8. Non-UTF-8 content causes irreversible garbled text in IMA. See root SKILL.md § MANDATORY RULES for platform-specific validation methods.

API base path: openapi/note/v1

通过 IMA OpenAPI 管理用户个人笔记,支持读取(搜索、列表、获取内容)和写入(新建、追加)。

完整的数据结构和接口参数详见 references/api.md。

隐私规则: 笔记内容属于用户隐私,在群聊场景中只展示标题和摘要,禁止展示笔记正文。

接口决策表

用户意图 调用接口 关键参数
搜索/查找笔记 search_note query_info(QueryInfo 对象)
查看笔记本列表 / 列出笔记本 list_notebook cursor(必填,首页传"0") + limit(必填)
列出笔记/获取多篇笔记信息 list_note folder_id(选填,空为全部) + sort_type + cursor(首次传"") + limit
读取笔记正文 get_doc_content note_id + target_content_format(必填,推荐0纯文本)
新建一篇笔记(用户明确说"新建/创建笔记"时走此接口) import_doc content + content_format(必填,固定1) + 可选 folder_id
往已有笔记追加内容(⚠️ 敏感操作:用户必须明确指定目标笔记,否则先确认再操作) append_doc note_id + content + content_format(必填,固定1)

⚠️ 新建 vs. 追加 — 行为规则

新建笔记(import_doc) 和 追加内容到已有笔记(append_doc) 是两个完全不同的操作,务必正确区分:

明确走新建的信号词

用户说以下任一表述时,直接调用 import_doc 创建新笔记:

  • "新建笔记"、"创建笔记"、"写一篇笔记"
  • "新建一篇笔记记录这些内容"

明确走追加的信号词

用户说以下任一表述时,调用 append_doc 追加到已有笔记(但仍需确认目标笔记,见下方规则):

Read the full file on GitHub · 192 lines

Files

What ships with it

1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 192 lines · 0 tokens per session scan A 0e57115fd6d9

Subscribe to this mod's changes

notes is a skill published in the GitHub repository UnicomAI/wanwu (2,372 stars, last pushed 4d ago), licensed Apache-2.0. It costs nothing until one of its globs matches a file; then it loads 2,995 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.