AI研究保存到Obsidian

PassAudited by VirusTotal on May 11, 2026.

Overview

Type: OpenClaw Skill Name: ai-research-to-obsidian Version: 1.0.0 The skill bundle is designed to automate AI-based research and save the output to an Obsidian vault. It utilizes browser interactions and local shell commands (mdfind, ls, mv in SKILL.md) to locate the user's Obsidian directory and manage files. The logic is consistent with its stated purpose and lacks any indicators of malicious intent, data exfiltration, or unauthorized access.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI02: Tool Misuse and Exploitation

What this means

The agent may create or move Markdown files into your Obsidian vault when you ask it to save research.

Why it was flagged

The skill documents local shell commands to find an Obsidian vault and move a generated file into it. This is aligned with the stated purpose, but it still modifies the user's local filesystem.

Skill content

mdfind "kMDItemFSName == 'Obsidian'"  # 查找本地库
ls ~/Library/Mobile\ Documents/iCloud~md~obsidian/Documents/
...
mv <源文件> <Obsidian路径>/

Recommendation

Confirm the target Vault path before saving, especially if you have multiple Obsidian vaults or synced folders.

NoteMedium Confidence

ASI03: Identity and Privilege Abuse

What this means

Your question may be submitted to Doubao, Kimi, or ChatGPT, potentially under your logged-in account.

Why it was flagged

The workflow uses third-party AI web services and may operate through the user's browser session if they are logged in. This is expected for the research workflow and no credential scraping or hidden account use is shown.

Skill content

根据内容类型选择：
- **通用问题** → 豆包 (https://www.doubao.com)
- **编程/技术** → Kimi (https://kimi.moonshot.cn)
- **英文/综合** → ChatGPT (https://chat.openai.com)

Recommendation

Avoid sending private, regulated, or account-sensitive information unless you are comfortable sharing it with the selected AI provider.

NoteHigh Confidence

ASI06: Memory and Context Poisoning

What this means

Generated research may remain in your notes and could be synced or referenced later depending on your Obsidian configuration.

Why it was flagged

The skill persists AI-generated research output as a structured Markdown note. This is the intended behavior, but saved notes may later be read, synced, or reused by the user’s Obsidian setup.

Skill content

创建 Markdown 文件，包含：
- YAML frontmatter（date, tags）
- 标题（标注日期）
- 格式化内容（表格、列表、层级结构）
- 来源标注

Recommendation

Review generated notes before relying on them, and be mindful of any Obsidian sync or publishing settings.