Evernote Core Workflow ASAFE
Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com.
Overview
Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com.
4f83675ca38aOBSERVED · 2026-10-08Host compatibility
What the documentation claims. We have not run a compatibility test.
| Host | Status | Notes |
|---|---|---|
| claude-code | mentioned |
What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
--- name: evernote-core-workflow-a description: 'Execute Evernote primary workflow: Note Creation and Management. Use when creating notes, organizing content, managing notebooks, or implementing note-taking features. Trigger with phrases like "create evernote note", "evernote note workflow", "manage evernote notes", "evernote content". ' allowed-tools: Read, Write, Edit, Bash(npm:*), Grep version: 1.13.0 license: MIT author: Jeremy Longshore <[email protected]> tags: - saas - evernote - workflow compatibility: Designed for Claude Code --- # Evernote Core Workflow A: Note Creation & Management ## Overview Primary workflow for creating, organizing, and managing notes in Evernote. Covers CRUD operations, ENML formatting, notebook organization, and tag management. ## Prerequisites - Completed `evernote-install-auth` setup - Understanding of ENML format - Valid access token configured ## Instructions ### Step 1: Note Creation Service Build a `NoteService` class that wraps NoteStore operations. Key methods: `createNote()` with ENML wrapping, `createTextNote()` for plain text, `createChecklistNote()` for `<en-todo>` items. Always sanitize titles (max 255 chars, no newlines) and wrap content in the required ENML envelope. ```javascript // Wrap raw HTML in required ENML envelope function wrapInENML(content) { return `<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE en-note SYSTEM "http://xml.evernote.com/pub/enml2.dtd"> <en-note>${content}</en-note>`; } const note = new Evernote.Types.Note(); note.title = 'Meeting Notes'; note.content = wrapInENML('<p>Discussion points...</p>'); note.tagNames = ['meeting', 'team']; const created = await noteStore.createNote(note); ``` ### Step 2: Note Retrieval and Reading Use `getNote(guid, withContent, withResources, withRecognition, withAltData)` to control response size. Extract plain text from ENML by stripping tags. Check for uncompleted todos with `/<en-todo\s+checked="false"/`. ### Step 3: Note Updates Update notes by fetching metadata, modifying fields, and calling `noteStore.updateNote()`. Append content by inserting before the closing `</en-note>` tag. Add tags via `note.tagNames` array. Move notes between notebooks by changing `note.notebookGuid`. ### Step 4: Note Organization Manage notebooks with `listNotebooks()`, `createNotebook()`, and `getDefaultNotebook()`. Use `notebook.stack` to group notebooks into stacks. Implement `ensureNotebook(name)` to find-or-create by name. ### Step 5: Complete Workflow Example See [Implementation Guide](references/implementation-guide.md) for the full `NoteService`, `NotebookService`, and a combined workflow that creates meeting notes with checklists, appends content, and toggles todos. ## Output - `NoteService` class with create, read, update, and delete operations - ENML content formatting and validation helpers - `NotebookService` for notebook CRUD and stack organization - Tag management (add, remove, find-or-create) - Checklist note support with `<en-todo>` elements ## Error Handling | Error | Cause | Solution | |-------|-------|----------| | `BAD_DATA_FORMAT` | Invalid ENML | Use `wrapInENML()` helper; remove forbidden elements (`<script>`, `<form>`) | | `LIMIT_REACHED` | Too many notebooks (250 max) | Clean up unused notebooks before creating | | `DATA_REQUIRED` | Missing title or content | Validate inputs before API call | | `INVALID_USER` | Token expired | Re-authenticate user via OAuth flow | ## Resources - [Creating Notes](https://dev.evernote.com/doc/articles/creating_notes.php) - [ENML Reference](https://dev.evernote.com/doc/articles/enml.php) - [Note Types Reference](https://dev.evernote.com/doc/reference/) ## Next Steps For search and retrieval workflows, see `evernote-core-workflow-b`. ## Examples **Meeting notes workflow**: Create a note with attendees, discussion points, and `<en-todo>` action items in a "Work" notebook. Append follow-up items after the meeting. Tag with `meeting` and `team`. **Bulk note import**: Read Markdown files from disk, convert to ENML using `htmlToENML()`, and create notes in a designated notebook with automatic tag assignment.
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (0)
No findings outside the package's declared scope.
Gates applied: no_behavioural_pass.
4f83675ca38afull audit observations/trust-audit/skill/jeremylongshore__evernote-core-workflow-a.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | 4f83675ca38a | SAFE | B | 89 | first audit |
Questions
What does the Evernote Core Workflow A skill do?
Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com.
Is Evernote Core Workflow A safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can Evernote Core Workflow A access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
Which assistants does Evernote Core Workflow A work with?
Its documentation mentions claude-code. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (4f83675ca38a), read on 2026-10-08. The repository is watched, and a new audit runs when it changes — this is the first audit.