Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Awesome Obsidian

v1.0.0

Obsidian 个人知识管理工作流。基于 PARA 方法 + 自动化工具链。用于:(1) 整理 Obsidian 库结构和命名规范 (2) Git 同步管理 (3) 每日时间线记录 (4) 插入手绘风格图表 (5) 从小艺帮记收藏整理笔记。触发词:Obsidian、笔记整理、库整理、daily log、时间线、...

0· 91·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for ajawpwinner-del/awesome-obsidian.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Awesome Obsidian" (ajawpwinner-del/awesome-obsidian) from ClawHub.
Skill page: https://clawhub.ai/ajawpwinner-del/awesome-obsidian
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install awesome-obsidian

ClawHub CLI

Package manager switcher

npx clawhub@latest install awesome-obsidian
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description (Obsidian PARA workflow, daily notes, git sync, hand-drawn diagrams) align with the included assets: templates, PARA docs, and two utility scripts (create_daily_note.sh, quick_sync.sh). Nothing in the manifest requests unrelated credentials or system access.
!
Instruction Scope
SKILL.md instructs use of several tools and scripts that are not present in the package (references to scripts like scripts/obsidian_audit.py, start-canvas.sh, export-canvas.sh, save-to-file.sh). It also shows cloning with an inline OAuth token in the repo URL and recommends cron auto-sync and a blanket git add/commit/push workflow — these instructions can cause tokens to be stored in repo configs or accidentally commit sensitive files. The two included scripts themselves (quick_sync.sh) will add/commit/push everything in the vault without filtering, which may be undesirable.
Install Mechanism
Instruction-only skill with no install spec and only two small shell scripts — no downloads or extract operations. Low install surface.
Credentials
No required environment variables or credentials declared. The scripts honor an optional OBSIDIAN_VAULT env var (reasonable). However SKILL.md advises pasting an OAuth token into a clone URL (https://oauth2:YOUR_TOKEN@host/...), which can store the token in .git/config and leak it; the quick_sync.sh will push whatever is present in the vault, potentially leaking sensitive files. The number of explicit credential requests is low but the suggested workflows are risky if followed without safeguards.
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and has no install-time persistence. The quick_sync.sh and cron examples can cause ongoing repository changes if the user enables them, but that is local action initiated by the user.
What to consider before installing
This package appears to be a coherent Obsidian workflow, but review before using: 1) SKILL.md references helper scripts (obsidian_audit.py, start-canvas.sh, export-canvas.sh, save-to-file.sh) that are not included — expect missing functionality. 2) Avoid cloning with 'https://oauth2:TOKEN@host/...' since that stores the token in git configs and can leak it; use a credential helper, deploy key, or personal access token stored securely with least privilege. 3) Inspect and test quick_sync.sh: it runs 'git add . && git commit && git push' and will commit everything in the vault — add/verify a .gitignore to prevent sensitive files (e.g., credentials, local plugin config) from being pushed. 4) Be cautious about the suggested cron auto-sync; automated pushes increase risk of leaking accidental secrets and may overwrite local configs. 5) Set OBSIDIAN_VAULT to a safe path before running scripts; the bundled defaults point to a workspace path that may not match your environment. 6) If you need the audit or canvas functionality, request the missing scripts from the author or obtain trusted implementations. If you plan to install/use this skill, prefer manual review and conservative git credential practices (credential helpers, SSH deploy keys, limited-scope tokens) and run scripts in a controlled environment first.

Like a lobster shell, security has layers — review code before you run it.

latestvk97ezsy1qkb10nhjcb4ng9ykpx85909j
91downloads
0stars
1versions
Updated 6d ago
v1.0.0
MIT-0

Awesome Obsidian - 个人知识管理工作流

基于 PARA 方法 + 自动化工具链的 Obsidian 工作流。

文件夹结构(PARA)

obsidian-vault/
├── inbox/              # 快速收集,临时笔记
├── projects/           # 活跃项目(有明确开始/结束)
├── areas/              # 持续关注的领域
├── resources/          # 长期参考笔记
├── archive/            # 归档(已完成项目)
├── journal/            # 日记(YYYY-MM-DD.md)
└── assets/             # 资源文件

工具链

Skill用途
obsidian-git-vaultGit 同步管理
obsidian-organizer库整理与命名规范
obsidian-daily-log每日时间线记录
excalidraw-handdraw手绘风格图表

日常工作流

1. 快速收集 → inbox/

新想法、临时笔记先丢进 inbox/,定期整理。

2. 每日记录 → journal/

使用 obsidian-daily-log 记录时间线:

## Timeline

- 09:00 — 开始工作
- 10:30 — 完成文档整理
- 14:00 — 会议讨论

3. 定期整理

  • 每周:整理 inbox,移动到正确位置
  • 每月:归档完成的项目

4. Git 同步

git pull
git add . && git commit -m "update: 笔记更新"
git push origin main

命名规范

中文笔记(优先)

  • 中文标题.md
  • 2026-04-21-会议纪要.md

英文笔记

  • kebab-case.md
  • YYYY-MM-DD.md

避免

  • 特殊符号、emoji 表情
  • Finalv2new 等无意义后缀

美化技巧

插入手绘图表

使用 excalidraw-handdraw 在笔记中插入手绘风格图表。

Obsidian 主题推荐

  • Minimal - 极简干净
  • Things - 温暖舒适
  • AnuPpuccin - 多彩可爱

安装:设置 → 外观 → 主题 → 浏览

自动化脚本

审计命名

python scripts/obsidian_audit.py <vault-path>

应用修复

python scripts/obsidian_audit.py <vault-path> --apply

最佳实践

  1. 一个笔记一个主题
  2. 及时整理 inbox
  3. [[]] 连接相关笔记
  4. 定期回顾笔记
  5. Git 提交 + 远程同步

⚠️ 整理规则

禁止修改人物原话

  • 整理笔记时,绝不修改、简化或意译人物的发言原话
  • 引用、演讲、声明、采访内容必须保持原文
  • 包括标点符号、语气词、停顿等细节
  • 如需概括,应在引用块之外单独撰写摘要

详细参考


📱 手机端查看

方案:出境易 + Obsidian Git 插件

在鸿蒙手机上使用 出境易 安装 Obsidian,配合 Git 插件同步笔记。

配置步骤

1. 安装应用

  • 在应用市场下载 出境易
  • 通过出境易安装 Obsidian

2. 安装 Git 插件

  • 打开 Obsidian → 设置 → 第三方插件
  • 浏览社区插件,搜索 「Git」
  • 安装并启用

3. 克隆仓库

  1. 打开命令面板(左下角菜单)
  2. 搜索 「Git: Clone an existing remote repo」
  3. 输入你的仓库地址:
    https://oauth2:YOUR_TOKEN@your-git-host.com/username/repo.git
    

    将 YOUR_TOKEN 替换为你的访问令牌,仓库地址替换为你的实际地址

  4. 选择保存目录(如 Obsidian
  5. 克隆深度留空(完整克隆)

4. 配置认证

在 Git 插件设置中:

  • Username:GitCode 用户名
  • Password/Token:访问令牌

5. 日常同步

  • 拉取:命令面板 → Git: Pull
  • 推送:命令面板 → Git: Commit and sync

注意事项

  • 克隆时会删除本地 .obsidian 配置
  • 建议在 WiFi 环境下同步
  • 如遇冲突,手动解决后再提交

Comments

Loading comments...