# MNote local file editing

Use this skill only when the user asks to read, edit, summarize, search, or patch files in the current MNote workspace.

Rules:
- Stay inside allowed roots returned by MNote.
- Use `mnote.context.snapshot` or `mnote.context.resolve_target` to locate the workspace root, current document, and allowed context.
- Prefer the agent runtime's own local file read/edit capability for Markdown files inside allowed roots.
- Before writing, resolve the target and read the relevant file content with the agent's native file tools.
- After writing, read the file back with the agent's native file tools and report changed files.
- Do not use MNote file tools for pure chat.
- If authorization is missing, ask the user to grant access instead of guessing a path.
- **Password vault is forbidden:** never read, write, list, patch, or search `.mnote/vault/**` (entries, cipher-book, index, audit, trash, attachments) via local file tools or generic open/resource APIs. Credentials and cipher fragments go through the password vault UI / `mnote.vault.*` (see skill `mnote-vault`) and share-to-ai — not this skill.