Obsidian Clip
v0.1.2Create and manage Obsidian “Clip” notes (web/article/page clips). Use when the user says “clip/剪藏/收藏/保存这个链接”, wants a readable summary of a URL, and wants it...
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (create/save Obsidian clips) matches the actual behavior: SKILL.md describes fetching & summarizing pages and the repo includes a script that writes markdown files into an Obsidian vault. There are no unexpected credentials, cloud APIs, or unrelated binaries requested.
Instruction Scope
Runtime instructions tell the agent to fetch pages (prefer lightweight extraction; use a real browser when needed) and to ask the user to log in if blocked by paywalls. This is coherent for a clipping tool, but it means the agent may perform web requests and use browser capabilities or ask the user to provide access to gated content — expected but worth noting for privacy.
Install Mechanism
No install spec; the skill is instruction-only with a single included Bash script. Nothing is downloaded or written to system locations beyond the user's Obsidian vault path.
Credentials
No required environment variables or secrets. Two optional environment variables (OBSIDIAN_VAULT and OBSIDIAN_CLIP_LANG) are reasonable and documented. The script also respects LANG/LC_ALL for language detection — appropriate for multilingual output.
Persistence & Privilege
always:false and the skill only writes to the user-configurable Obsidian vault (defaults to a path under $HOME). It does not modify other skills or system-wide agent settings.
Assessment
This skill appears safe and does what it says: it summarizes URLs and writes a note to a local Obsidian vault using the included script. Before enabling or using it, check these practical points: (1) confirm the vault path (OBSIDIAN_VAULT) so notes are saved where you expect; (2) be aware that the agent may fetch pages or open a browser to access content — do not use it to fetch pages that require you to expose credentials to an untrusted/hosted agent; (3) review the bundled script if you have strict filesystem or filename policies (it does basic sanitization but will create files under the vault); (4) if you run the agent on a remote server, ensure you are comfortable with the vault location and any web requests performed. If those are acceptable, the skill's design and permissions are proportionate to its purpose.Like a lobster shell, security has layers — review code before you run it.
latest
Obsidian Clip
Turn a URL into a readable, reusable Clip note in an Obsidian vault.
Storage
- Vault:
${OBSIDIAN_VAULT}(recommended to set; fallback supported by script) - Folder:
Clip/YYYY-MM/ - Filename:
YYYY-MM-DD_标题_关键词.md
Output standard (must follow)
The skill supports Chinese and English notes.
- Default language: auto-detect (based on your system locale and whether the content contains CJK characters)
- Override language: set
OBSIDIAN_CLIP_LANG=zhorOBSIDIAN_CLIP_LANG=en
Structure:
- Theme / 主题一句话 (1 sentence, plain)
- Takeaways / 要点 (5–10 bullets, each ≤ 1 line)
- How I’ll use it / 我怎么用 (1–3 bullets; actions / why it matters)
- Limits / 规则/限制 (optional; paywall/login required, license, caveats)
Workflow
- Fetch the page
- Prefer lightweight extraction tools (e.g.,
web_fetch) first. - Use a real browser only when needed (JS-heavy sites / WeChat / login / extraction fails).
- If blocked by login/paywall, ask the user to log in, then retry.
- Prefer lightweight extraction tools (e.g.,
- Rewrite for readability
- Don’t make the output about tool limitations.
- If details are still inaccessible, produce a useful clip anyway: page定位 + 可用信息 + what you need to finish.
- Do not send screenshots/images unless the user explicitly requests.
- Save to Obsidian using the bundled script.
Bundled script
Path: scripts/clip_save.sh
Example:
bash scripts/clip_save.sh \
--url "https://example.com" \
--title "页面标题" \
--theme "一句话主题" \
--bullets "要点1" --bullets "要点2" \
--actions "我怎么用1" \
--limits "规则/限制(可选)" \
--tags "clip" --tags "ai" \
--keywords "keyword1-keyword2" \
--date "YYYY-MM-DD"
Notes:
--bullets/--actions/--limits/--tagscan be repeated.- Keep
--keywordsshort (2–5 tokens joined by-).
Comments
Loading comments...
