Obsidian Ontology Sync

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Private contact, client, project, and team-status details may be consolidated into a persistent machine-readable graph.

Why it was flagged

The skill is designed to extract sensitive personal, business, and behavioral information from notes into a structured ontology, which may later be queried or reused.

Skill content
Extracts: - `Person` entity (name, email, phone) ... `has_contract_value` ... `response_pattern` ... `behavioral_pattern` tracking
Recommendation

Review the configured source folders, avoid syncing notes that should remain private, and consider retention or cleanup practices for the generated ontology.

NoteHigh Confidence
ASI10: Rogue Agents
What this means

If enabled, the skill may repeatedly process changed notes without a fresh manual review each time.

Why it was flagged

The README recommends a recurring cron schedule, meaning the sync can continue running automatically after setup.

Skill content
cron add \
  --schedule "0 */3 * * *" \
  --payload '{"kind":"systemEvent","text":"Run obsidian-ontology sync"}'
Recommendation

Only enable the cron job if recurring automatic sync is desired, and test first with the documented dry-run command.

What this means

Users may have less ability to verify where the script came from or how dependencies should be installed.

Why it was flagged

The registry information does not provide an upstream source or installation specification, so users have less provenance context for the included script.

Skill content
Source: unknown; Homepage: none; No install spec — this is an instruction-only skill.
Recommendation

Review the included script before running it and confirm required Python dependencies, such as PyYAML, are installed from trusted sources.