Save to Obsidian

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A saved note can create or replace a file in the remote Obsidian vault.

Why it was flagged

The use of scp is expected for this skill, but it gives the agent the ability to write to the configured remote vault, and the artifact explicitly notes that filename collisions overwrite without warning.

Skill content
Copy to remote vault: `scp <filepath> user@remote-host:/path/to/obsidian/vault/` ... Duplicate filename: overwrites silently
Recommendation

Verify the destination vault and filename before saving important content; consider adding an existence check or explicit overwrite confirmation.

What this means

The skill can authenticate to the configured SSH host and write files using whatever permissions that SSH account has.

Why it was flagged

SSH authentication is purpose-aligned for copying to a remote vault, but it relies on local SSH credentials and the configured remote account.

Skill content
Uses existing SSH key auth (no password) ... SSH key path | Path to SSH private key (default: `~/.ssh/id_rsa`)
Recommendation

Use a dedicated SSH key or remote account limited to the intended Obsidian vault directory, and keep the TOOLS.md host/path configuration under your control.

What this means

Installation may require manual setup that is not captured by the registry metadata, and a misconfigured script or SSH setup could save to the wrong place.

Why it was flagged

The metadata under-declares runtime expectations because the included README and script require SSH/scp setup and a save-to-obsidian shell script.

Skill content
Required binaries (all must exist): none ... No install spec — this is an instruction-only skill
Recommendation

Before using it, confirm the installed script path, scp availability, SSH host, and vault path match your intended Obsidian vault.