Obsidian KB

PassAudited by ClawScan on May 10, 2026.

Overview

This instruction-only Obsidian tool appears local and purpose-aligned, but it will scan your vault and persist or export folder statistics.

This skill looks reasonable for managing Obsidian knowledge-base statistics. Before using it, confirm the vault and workspace paths, avoid scanning unrelated folders, review the ~/.claude/kb-density-rules.md file it creates or updates, and back up current rule data before making changes.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI02: Tool Misuse and Exploitation

What this means

If the wrong directory is provided, the agent could enumerate Markdown files and folder names outside the intended Obsidian vault.

Why it was flagged

The skill instructs the agent to run local shell commands over a user-selected vault path. This is expected for scanning an Obsidian vault, but the user should ensure the path is correct and not broader than intended.

Skill content

find "<YOUR_VAULT_PATH>" -type f -name "*.md" | wc -l

Recommendation

Confirm the exact vault path before scanning, avoid pointing the skill at broad parent directories, and approve file-writing steps explicitly.

Note

ASI06: Memory and Context Poisoning

What this means

Your Obsidian vault structure and classification history may remain in local persistent files and be reused in later reports or comparisons.

Why it was flagged

The skill stores and reuses persistent local rules/statistics in a global Claude directory and a workspace location. This is disclosed and aligned with the knowledge-base management purpose, but it may preserve private folder names, statistics, and user-provided rule notes.

Skill content

同步更新两个位置：
     - `~/.claude/kb-density-rules.md`
     - `<YOUR_WORKSPACE_PATH>

Recommendation

Review the rules file contents, keep a backup before rule changes, and make sure the workspace destination is specific and intended.

Note

ASI04: Agentic Supply Chain Vulnerabilities

What this means

There is less information about the author or upstream project, but the reviewed artifact is only an instruction file.

Why it was flagged

The artifact has limited provenance, although no executable code or install-time dependency is provided in the reviewed package.

Skill content

Source: unknown; Homepage: none; No install spec — this is an instruction-only skill.

Recommendation

Install only if you are comfortable with the source, and review SKILL.md before allowing scans or writes.