skills/productivity/bear-notes/SKILL.md
Create, search, and manage Bear notes via grizzly CLI.
npx skillsauth add abhiunix/community-registry bear-notesInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Use grizzly to create, read, and manage notes in Bear on macOS.
Requirements
~/.config/grizzly/token)For operations that require a token (add-text, tags, open-note --selected), you need an authentication token:
echo "YOUR_TOKEN" > ~/.config/grizzly/tokenCreate a note
echo "Note content here" | grizzly create --title "My Note" --tag work
grizzly create --title "Quick Note" --tag inbox < /dev/null
Open/read a note by ID
grizzly open-note --id "NOTE_ID" --enable-callback --json
Append text to a note
echo "Additional content" | grizzly add-text --id "NOTE_ID" --mode append --token-file ~/.config/grizzly/token
List all tags
grizzly tags --enable-callback --json --token-file ~/.config/grizzly/token
Search notes (via open-tag)
grizzly open-tag --name "work" --enable-callback --json
Common flags:
--dry-run — Preview the URL without executing--print-url — Show the x-callback-url--enable-callback — Wait for Bear's response (needed for reading data)--json — Output as JSON (when using callbacks)--token-file PATH — Path to Bear API token fileGrizzly reads config from (in priority order):
GRIZZLY_TOKEN_FILE, GRIZZLY_CALLBACK_URL, GRIZZLY_TIMEOUT).grizzly.toml in current directory~/.config/grizzly/config.tomlExample ~/.config/grizzly/config.toml:
token_file = "~/.config/grizzly/token"
callback_url = "http://127.0.0.1:42123/success"
timeout = "5s"
--enable-callback when you need to read data back from Beardevelopment
Generate a STRIDE-based threat model from codebase and architecture analysis. Identifies assets, trust boundaries, data flows, threats, and mitigations. Language-agnostic.
development
Run a comprehensive security audit against a codebase. Covers OWASP Top 10, secrets exposure, dependency vulnerabilities, misconfigurations, and insecure patterns. Language-agnostic.
development
Security-focused code review for staged changes or specified files. Checks for injection, auth flaws, crypto misuse, data exposure, and insecure patterns. Works with any language.
development
Manage Trello boards, lists, and cards via the Trello REST API.