AI研究保存到Obsidian

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent instruction-only workflow for asking AI tools a user’s question and saving the result as a local Obsidian Markdown note.

Before installing, be aware that your questions may be sent to Doubao, Kimi, or ChatGPT and the resulting Markdown file may be saved into your Obsidian vault. Confirm the Vault path and review generated content before keeping or syncing it.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI02: Tool Misuse and Exploitation

What this means

The agent may create or move Markdown files into your Obsidian vault when you ask it to save research.

Why it was flagged

The skill documents local shell commands to find an Obsidian vault and move a generated file into it. This is aligned with the stated purpose, but it still modifies the user's local filesystem.

Skill content

mdfind "kMDItemFSName == 'Obsidian'"  # 查找本地库
ls ~/Library/Mobile\ Documents/iCloud~md~obsidian/Documents/
...
mv <源文件> <Obsidian路径>/

Recommendation

Confirm the target Vault path before saving, especially if you have multiple Obsidian vaults or synced folders.

NoteMedium Confidence

ASI03: Identity and Privilege Abuse

What this means

Your question may be submitted to Doubao, Kimi, or ChatGPT, potentially under your logged-in account.

Why it was flagged

The workflow uses third-party AI web services and may operate through the user's browser session if they are logged in. This is expected for the research workflow and no credential scraping or hidden account use is shown.

Skill content

根据内容类型选择：
- **通用问题** → 豆包 (https://www.doubao.com)
- **编程/技术** → Kimi (https://kimi.moonshot.cn)
- **英文/综合** → ChatGPT (https://chat.openai.com)

Recommendation

Avoid sending private, regulated, or account-sensitive information unless you are comfortable sharing it with the selected AI provider.

NoteHigh Confidence

ASI06: Memory and Context Poisoning

What this means

Generated research may remain in your notes and could be synced or referenced later depending on your Obsidian configuration.

Why it was flagged

The skill persists AI-generated research output as a structured Markdown note. This is the intended behavior, but saved notes may later be read, synced, or reused by the user’s Obsidian setup.

Skill content

创建 Markdown 文件，包含：
- YAML frontmatter（date, tags）
- 标题（标注日期）
- 格式化内容（表格、列表、层级结构）
- 来源标注

Recommendation

Review generated notes before relying on them, and be mindful of any Obsidian sync or publishing settings.