Kg Note Method Obsidian

PassAudited by VirusTotal on May 9, 2026.

Overview

Type: OpenClaw Skill Name: kg-note-method-obsidian Version: 3.23.0 The skill bundle is a legitimate tool for organizing Obsidian notes into a Knowledge Graph (KG) structure. It includes utility scripts (checklist-generator.py, enrichment.py, yaml-validator.py) and detailed instructions in SKILL.md that implement a multi-step workflow for note classification, renaming, and relationship building. While the agent is granted broad file modification permissions within the Obsidian vault, the behavior is strictly aligned with the stated purpose, includes safety mechanisms like YAML validation and mandatory checklists, and lacks any indicators of data exfiltration, malicious execution, or harmful prompt injection.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the organizing logic is wrong, the skill could change note contents or filenames immediately after invocation.

Why it was flagged

The skill explicitly instructs the agent to edit, write, and rename local note files without an additional confirmation step for some user-invoked commands.

Skill content
`kg "笔记名"` / `kg 完善` → `直接执行(不询问)` ... `patch/write_file/mv` ... `立即执行`
Recommendation

Use `kg 检查` when you want a preview and confirmation step, and keep backups or version control for important Obsidian vaults.

What this means

Running the helpers can create checklist files, validate notes, or append formatted text to a selected note.

Why it was flagged

The skill documents local Python helper execution. The provided scripts are simple local file utilities and show no network calls or obfuscated behavior.

Skill content
`checklist-generator.py` ... `python <script> <任务名> <步1> [步2...]`; `yaml-validator.py` ... `python <script> <文件.md>`; `enrichment.py` ...
Recommendation

Run the bundled scripts only from the reviewed skill directory and verify the target vault or note path before execution.

What this means

Old or modified task checklists may cause the agent to resume outdated operations unless reviewed.

Why it was flagged

The skill stores task plans in `_working/` and later reuses them to resume work, so stale or externally edited checklist files could influence future note edits.

Skill content
`中途中止 → 清单文件保留,下次会话恢复` and `有同名任务的清单 → read_file 检查清单+执行清单 → ... 从未完成步开始`
Recommendation

Review `_working/` checklist files before resuming tasks and delete stale checklists you no longer trust.