Work with the Note module of this Arandu application. An agent skill from arandu-io/arandu.
$ npx skills add arandu-io/arandu --skill notes -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install arandu-io/arandu notes --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/arandu-io/arandu.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.agents/skills/notes .claude/skills/notes && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "notes" agent skill from https://github.com/arandu-io/arandu/tree/main/.agents/skills/notes into .claude/skills/notes/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "notes", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/arandu-io/arandu/tree/main/.agents/skills/notesType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add arandu-io/arandu --skill notes -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install arandu-io/arandu notes --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/arandu-io/arandu.git skills-src && mkdir -p .agents/skills && cp -r skills-src/.agents/skills/notes .agents/skills/notes && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "notes" agent skill from https://github.com/arandu-io/arandu/tree/main/.agents/skills/notes into .agents/skills/notes/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "notes", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add arandu-io/arandu --skill notes -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install arandu-io/arandu notes --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/arandu-io/arandu.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/.agents/skills/notes .cursor/skills/notes && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "notes" agent skill from https://github.com/arandu-io/arandu/tree/main/.agents/skills/notes into .cursor/skills/notes/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "notes", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/arandu-io/arandu.git --path .agents/skills/notes--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add arandu-io/arandu --skill notes -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install arandu-io/arandu notes --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/arandu-io/arandu.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/.agents/skills/notes .gemini/skills/notes && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "notes" agent skill from https://github.com/arandu-io/arandu/tree/main/.agents/skills/notes into .gemini/skills/notes/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "notes", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install arandu-io/arandu notesInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add arandu-io/arandu --skill notes -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/arandu-io/arandu.git skills-src && mkdir -p .github/skills && cp -r skills-src/.agents/skills/notes .github/skills/notes && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "notes" agent skill from https://github.com/arandu-io/arandu/tree/main/.agents/skills/notes into .github/skills/notes/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "notes", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add arandu-io/arandu --skill notes -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install arandu-io/arandu notes --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/arandu-io/arandu.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/.agents/skills/notes .opencode/skills/notes && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "notes" agent skill from https://github.com/arandu-io/arandu/tree/main/.agents/skills/notes into .opencode/skills/notes/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "notes", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
notesWork with the Note module of this Arandu application. An agent skill from arandu-io/arandu.
Notes is an agent skill from arandu-io/arandu. Work with the Note module of this Arandu application. Use when the request mentions notes, when a notes route is involved, or when reading or changing note records. Covers what the module exposes, which roles may take which action, and the rule that the Service authorizes before it reaches the Hesape Model.
Its SKILL.md is about 1.1k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
The repository describes itself as: The Arandu project skeleton, which aru new clones. The licence is MIT.
Read from SKILL.md and the folder at commit 38c9b70. It shows what the files ask for, not the result of running them.
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Shell commands in SKILL.md call:
goFrom the folder's file list and the shell code blocks in SKILL.md.
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Notes loads about 1.1k tokens when it runs. Until then it costs about 79 tokens; SKILL.md has 522 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
The full file from arandu-io/arandu at commit 38c9b70, republished under its MIT licence (© arandu-io). 522 words, ~1,122 tokens.
.claude/skills/notes/SKILL.md (or your agent's skills folder).Example resource. Remove with the list under "The example resource" in README.md.
Generated from a specification. If it needs to change, change the specification
and generate again rather than editing the files by hand -- what falls outside
what the specification can say goes between the // arandu:begin custom and
// arandu:end custom markers, which survive regeneration.
| file | what it holds |
|---|---|
app/Models/Note.go | the entity and its table, with custom blocks for settings and local scopes |
app/Models/NoteQuery.go | Notes, the typed query and the collection, written by aru model:build and never by hand |
app/Policies/NotePolicy.go | who may do what, and the only thing that issues a Grant |
app/Services/NoteService.go | the domain and the only consumer of the Model entry point |
app/Http/Controllers/NoteController.go | the actions the routes dispatch to |
app/Http/Requests/NoteRequest.go | the input contract of create and update, with its form tags. Authorization stays in the Policy |
resources/views, under the resource | the four screens, which share one row struct |
tests/Unit/Note_test.go | that reads authorize before the Model is queried |
| field | type |
|---|---|
title | string |
body | text |
pinned | bool |
Every query uses the Model's tenant_id scope. Builder terminals take the
Grant, and its tenant never comes from a path segment, a body, a query or a header.
There is one way, and the compiler is what says so.
g, err := security.Authorize(ctx, policy, subject, action, models.Note{})
if err != nil {
return err
}
record, err := models.Notes(db).FindOrFail(ctx, g, id)Every terminal of NoteQuery takes security.Grant, and nothing outside the
security package can build one. The Service owns the database handle, authorizes first,
and then spends that Grant on the Model. A Controller has neither dependency and
cannot grow a second persistence path.
Reads are not exempt. List, FindOrFail, a report and an export all require a Grant.
var in requests.NoteRequest
if err := ctx.Bind(&in); err != nil {
return err
}
who, _ := ctx.User()
created, err := c.svc.Create(ctx.Ctx(), who, in)
if err != nil {
return err
}
return ctx.RedirectRoute("notes.show", created.ID)ctx.User(), which the sign-in guard on the routes puts
on the request. There is no session lookup in the controller.ctx.Bind into NoteRequest: only the fields with a
form tag are read, trimmed and converted. A new field is one line there,
one in the model and one in the service's fill.validation.Errors goes back to the form with the messages and what was typed,
a missing row is 404, a refusal is 403, and an error with an HTTPStatus() int
method is that status.view.New(ctx, title): the title, what a rejected form
left in the flash, and the CSRF token the middleware issued. The controller
takes the service and nothing else.SimplePaginate, newest first, and the key
is one the Model generates on insert.The generated policy denied every action; this example opened it, inside the
custom block of app/Policies/NotePolicy.go:
| action | who |
|---|---|
note.list, note.view, note.create | anybody signed in to the tenant |
note.update, note.delete | the note's author, user_id, and nobody else |
The author is set by NoteService.Create from ctx.User(), never from the
form. A note of another tenant is not found at all (404), because every read is
scoped by the Grant's tenant; another member's note is found and refused (403).
tests/Feature/Notes_test.go proves each of those.
export GOWORK=off
aru view:build && go build ./... && go vet ./... && go test -race ./... && aru doctor© arandu-io, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Just SKILL.md in .agents/skills/notes of arandu-io/arandu.
Open the folder on GitHubat commit 38c9b70
Notes next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Notes this skillarandu-io/arandu | 281 | — | ~1.1k | Automated safety check: Pass | MIT | |
| Meeting Notes And Actionscomposio-community/awesome-codex-skills | 17k | — | ~357 | Automated safety check: Pass | None | |
| Es Modulesthedaviddias/Front-End-Checklist | 74k | — | ~482 | Automated safety check: Pass | MIT | |
| Meeting Notesholaboss-ai/holaOS | 11k | — | ~548 | Automated safety check: Pass | Custom licence | |
| Note Takinginkeep/open-knowledge | 4.4k | — | ~485 | Automated safety check: Pass | GPL-3.0 | |
| Release Notes One Pagernexu-io/open-design | 100k | — | ~920 | Automated safety check: Pass | Apache-2.0 |
composio-community/awesome-codex-skills
Turn meeting transcripts or rough notes into crisp summaries with decisions, risks, and owner-tagged action items; use for Zoom/Meet/Teams transcripts, call notes, or long meeting chats to generate…
thedaviddias/Front-End-Checklist
A skill your agent uses when reviewing scripts, client components, bundles, or runtime behavior related to Use ES modules (import/export).
holaboss-ai/holaOS
Turn raw notes or a transcript into a clean summary with decisions and action items.
inkeep/open-knowledge
How to work in a Plain Notes project (the plain-notes starter pack): a flat notes/ folder plus a daily/ journal.
nexu-io/open-design
Release notes one-page HTML with highlights, Added, Fixed, Breaking changes, Known issues, and Upgrade note.
sickn33/agentic-awesome-skills
Semantic + keyword search and connection-discovery across the user's own Apple Notes via the apple-notes MCP server.
arandu-io/arandu
Explains what each aru doctor architecture-check finding means in the Arandu Go framework, why it is never suppressed, and how to fix the line it points to.
arandu-io/arandu
Decides whether a feature belongs in the application or in one of five shared Arandu modules before adding permissions, wallets, tags, Markdown rendering or API docs.
arandu-io/arandu
Adds a new entity, resource or CRUD module to an Arandu Go application by writing a YAML specification instead of hand-writing the Go code.
arandu-io/arandu
Explains authorization in an Arandu Go application: write a Policy, get a security.Grant through security.Authorize, re-authorize each row, and keep tenant isolation.
arandu-io/arandu
Writes and changes pages, layouts, forms and HTMX fragments in an Arandu Go app using its .kyse.go templates, escaping rules and Content-Security-Policy limits.
Work with the Note module of this Arandu application. An agent skill from arandu-io/arandu. Notes is an agent skill from arandu-io/arandu. Work with the Note module of this Arandu application.
Notes fits situations like: the request mentions notes; A notes route is involved; changing note records.
Run `npx skills add arandu-io/arandu --skill notes -a claude-code`. Or copy the skill folder (.agents/skills/notes in arandu-io/arandu) into .claude/skills/notes in your project. Claude Code loads it when a task matches its description.
Run `npx skills add arandu-io/arandu --skill notes -a codex`. Or copy the skill folder (.agents/skills/notes in arandu-io/arandu) into .agents/skills/notes in your project. Codex loads it when a task matches its description.
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add arandu-io/arandu --skill notes -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/notes, .gemini/skills/notes, .github/skills/notes and .opencode/skills/notes in your project.
Going by SKILL.md and its folder, Notes needs the command-line tools its instructions call (go).
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
Notes is published under the MIT licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.
About 1.1k tokens (SKILL.md is roughly 4.5k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
Skills that share tags, products or a category with Notes: Meeting Notes And Actions (composio-community/awesome-codex-skills, 17k stars), Es Modules (thedaviddias/Front-End-Checklist, 74k stars), Meeting Notes (holaboss-ai/holaOS, 11k stars) and Note Taking (inkeep/open-knowledge, 4.4k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
arandu-io (a GitHub organization) maintains it in arandu-io/arandu, which has 281 GitHub stars. The repository holds 6 skills in this directory. The repository was last updated on October 4, 2026.
Source: arandu-io/arandu on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.
