Obsidian Memory System
v1.2.0Structured persistent memory system using an Obsidian vault with daily journals, project docs, knowledge base, self-improvement logging, and Discord workspac...
⭐ 0· 107·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description match what the skill actually does: it creates an Obsidian vault structure, brain file templates, symlinks, and provides Discord/OpenClaw configuration guidance. Requiring the 'openclaw' binary and producing local vault files is coherent with the goal of integrating persistent memory into an OpenClaw agent.
Instruction Scope
SKILL.md instructs the agent (and operator) to create/modify local files and symlinks, use memory_search, and configure OpenClaw and a Discord bot. It also prescribes a heartbeat flow that can automatically append/update vault files when there was recent interaction — this implies background writes to local files without further user messages, which is expected for a persistent memory system but worth noting as a behavioral guarantee you should review before enabling.
Install Mechanism
This is instruction-only plus a bundled setup script (scripts/setup-vault.sh) that writes files and symlinks under the chosen workspace. There are no network downloads, package installs, or extraction of remote archives in the install flow, which reduces supply-chain risk.
Credentials
The skill itself declares no required environment variables. It does, however, document that semantic memory needs an embedding provider API key (e.g., OpenAI) configured in OpenClaw auth and instructs you to add a Discord bot token to your OpenClaw config for Discord integration. Those credentials are expected for the described features but are sensitive — the guidance to keep full credentials in a non-synced 'vault-private/TOOLS-FULL.md' is appropriate and you should avoid storing tokens in world-readable config files.
Persistence & Privilege
The skill does not request always:true and does not modify other skills. It writes files and creates symlinks in the chosen workspace and recommends enabling heartbeat/background updates. This gives it ongoing local persistence (files it creates remain on disk) and the ability to update memory files automatically per heartbeat rules — acceptable for the stated purpose but a behavior to consent to explicitly.
Assessment
This skill appears to be what it says: it initializes an Obsidian-style vault for the agent and documents how to wire OpenClaw and a Discord bot. Before installing: (1) Review the setup script and target directory to ensure it will create symlinks/files where you expect (it won’t overwrite regular files but will create symlinks if none exist). (2) Be prepared to supply a Discord bot token and (optionally) an embedding provider API key — store those secrets securely (avoid committing them to public repos or world-readable configs; prefer a non-synced vault-private file or a secrets manager). (3) Limit the Discord bot permissions (avoid granting Administrator unless needed) and enable only required privileged intents. (4) Understand that heartbeat rules can cause the agent to append/update vault files automatically when there is recent interaction — if you want explicit approval before writes, do not enable automated heartbeats. (5) If you plan to use semantic search or TTS, validate costs and provider configuration first. If any of these behaviors are unacceptable, inspect or modify scripts/references before running the setup script. If you want, I can list the exact lines in scripts/setup-vault.sh that create files/symlinks so you can review them or provide safer alternatives (e.g., a dry-run mode).Like a lobster shell, security has layers — review code before you run it.
latestvk97c4xer5q7skapzket9rw27z9846h31
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binsopenclaw