Book Capture Obsidian
v1.2.1Capture and normalize book metadata into Obsidian Markdown notes from photos or Goodreads CSV exports. Use for barcode and OCR ISBN extraction, metadata enri...
⭐ 1· 310·1 current·1 all-time
byRicardo Almeida@ricardodpalmeida
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (photo/CSV -> Obsidian notes) matches the included scripts: ISBN extraction (barcode/OCR), metadata resolution (Google Books / OpenLibrary), upsert into vault, and dashboard generation. Binary subprocess usage (zbarimg, tesseract) and network requests to public metadata APIs are expected for this purpose.
Instruction Scope
Runtime instructions and SKILL.md accurately refer to the included scripts. The workflow requires reading references/*.md, running the scripts, and writing Markdown files into the user-provided Obsidian vault path. The scripts also perform outbound HTTP requests to Google Books and OpenLibrary and may invoke local CLI tools (zbarimg, tesseract). There is no evidence the instructions attempt to read unrelated system secrets, other skills' config, or exfiltrate data to hidden endpoints, but the agent will have filesystem write access to the vault and network access to external APIs during normal operation.
Install Mechanism
There is no automated install spec (instruction-only), and dependencies are listed in requirements.txt. Nothing is downloaded from arbitrary URLs or installed from unknown release hosts. The requirement to pip-install packages and to have external binaries available is normal for this kind of tool.
Credentials
The registry lists no required env vars but the SKILL.md and references/configuration.md expect several environment variables (vault path, optional GOOGLE API key, barcode/OCR toggles, timeouts, etc.). Those env vars are proportional to the functionality; the only credential-like variable is an optional BOOK_CAPTURE_GOOGLE_API_KEY for Google Books quota/stability. No unrelated secrets or service credentials are requested.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. It writes only to user-specified vault paths and does not modify other skills or global agent config. Autonomous invocation is allowed by default (normal) but not combined with other privilege escalations.
Assessment
This skill appears to do what it claims, but be aware of the practical implications before running it: it will read and write files in whatever Obsidian vault path you provide, so point it to a test or backed-up vault when doing bulk migrations. It will also make outbound HTTP requests to Google Books and OpenLibrary (optionally using BOOK_CAPTURE_GOOGLE_API_KEY). Ensure required Python packages and optional binaries (zbarimg, tesseract) are installed in your environment. The registry metadata did not declare the environment variables the skill expects — review references/configuration.md and set BOOK_CAPTURE_VAULT_PATH (or pass --vault-path) and other controls deliberately. If you have sensitive content in your vault, run a dry-run first and inspect script output before performing bulk writes.Like a lobster shell, security has layers — review code before you run it.
latestvk97b2jab0x2gxq5f6pvxy6bmjh82ex8p
License
MIT-0
Free to use, modify, and redistribute. No attribution required.