Kg Note Method Obsidian

AdvisoryAudited by Static analysis on May 9, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the organizing logic is wrong, the skill could change note contents or filenames immediately after invocation.

Why it was flagged

The skill explicitly instructs the agent to edit, write, and rename local note files without an additional confirmation step for some user-invoked commands.

Skill content
`kg "笔记名"` / `kg 完善` → `直接执行(不询问)` ... `patch/write_file/mv` ... `立即执行`
Recommendation

Use `kg 检查` when you want a preview and confirmation step, and keep backups or version control for important Obsidian vaults.

What this means

Running the helpers can create checklist files, validate notes, or append formatted text to a selected note.

Why it was flagged

The skill documents local Python helper execution. The provided scripts are simple local file utilities and show no network calls or obfuscated behavior.

Skill content
`checklist-generator.py` ... `python <script> <任务名> <步1> [步2...]`; `yaml-validator.py` ... `python <script> <文件.md>`; `enrichment.py` ...
Recommendation

Run the bundled scripts only from the reviewed skill directory and verify the target vault or note path before execution.

What this means

Old or modified task checklists may cause the agent to resume outdated operations unless reviewed.

Why it was flagged

The skill stores task plans in `_working/` and later reuses them to resume work, so stale or externally edited checklist files could influence future note edits.

Skill content
`中途中止 → 清单文件保留,下次会话恢复` and `有同名任务的清单 → read_file 检查清单+执行清单 → ... 从未完成步开始`
Recommendation

Review `_working/` checklist files before resuming tasks and delete stale checklists you no longer trust.