lecture-notes-master

PassAudited by ClawScan on May 1, 2026.

Overview

The skill appears coherent for generating Obsidian study notes, but it writes local files and includes a specific person's profile and iCloud vault path that users should update before use.

Before installing, change the bundled profile and Obsidian vault path to your own values, run any Python helper only against a dedicated inbox/test folder, and review generated notes before syncing or moving them into your permanent vault.

Findings (5)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Users may run local helper code from a package whose source/homepage is not described in the registry metadata.

Why it was flagged

The package is presented as instruction-only but includes helper scripts and has limited provenance metadata. This is a transparency/provenance note, not evidence of malicious behavior.

Skill content
Source: unknown; Homepage: none; No install spec — this is an instruction-only skill. Code file presence: 3 code file(s)
Recommendation

Inspect any helper script before running it and prefer updated metadata that declares the Python helper workflow clearly.

What this means

If pointed at the wrong folder or an existing filename, generated notes could clutter or overwrite local markdown files.

Why it was flagged

The helper can create directories and write files to the selected output path. This is expected for a note generator, but it can overwrite same-named files.

Skill content
def write_file(content, filepath):
    os.makedirs(os.path.dirname(filepath), exist_ok=True)
    with open(filepath, "w", encoding="utf-8") as f:
        f.write(content)
Recommendation

Use a dedicated inbox/output folder, check the configured path before generation, and keep backups or version control for the vault.

What this means

Large generated note sets or accidental overwrites may sync across devices.

Why it was flagged

The default output path is inside an iCloud-synced Obsidian vault, so generated files can propagate through cloud sync and the user's knowledge base.

Skill content
"vault_path": "/Users/apple/Library/Mobile Documents/iCloud~md~obsidian/Documents/Schaefer_Master/",
"inbox_dir": "00-Inbox/"
Recommendation

Change the vault path to your own intended vault, generate into 00-Inbox or a test folder first, and review before moving files into permanent course folders.

What this means

Private documents or inaccurate/injected source content could become persistent study notes and be reused later.

Why it was flagged

User-provided source material is transformed into persistent Obsidian notes. This is the skill's purpose, but generated summaries may preserve private or untrusted source content.

Skill content
Inputs: lectures, articles, videos, URLs, transcripts, PDFs. Outputs: Obsidian markdown with Mermaid diagrams, comparison tables, bilingual terms, wikilinks.
Recommendation

Only provide material you are comfortable storing in the vault, keep generated notes in review status, and verify important claims before relying on them.

What this means

A different user could accidentally generate notes containing another person's profile or course context.

Why it was flagged

The skill is bundled with a specific user's identity and academic profile. It is disclosed, but the registry description otherwise reads like a general note-taking skill.

Skill content
"name": "Schaefer",
"full_name": "Zonghan Jia",
"university": "Heidelberg University (ZITI)",
"program": "Computer Engineering"
Recommendation

Edit config.json and templates to use your own name, institution, language preferences, and vault path before installing or generating notes.