Cli Obsidian

Command-line tool to create, read, search, and export Obsidian notes locally with JSON output support for agent integration.

Security Scan

The skill's purpose and instructions are plausible for a local Obsidian CLI, but it directs the user to pip-install an unvetted package from an unknown source (no homepage) which could run arbitrary code and access local notes — this mismatch and lack of provenance merit caution.

Purpose & Capability

Name, description, README and SKILL.md consistently describe a CLI for creating/searching/exporting Obsidian notes with JSON output; required capabilities (local filesystem access) are consistent with that purpose.

Instruction Scope

SKILL.md is simple and scoped: it tells the agent to pip install cli-obsidian and shows CLI commands. It does not explicitly instruct the agent to read unrelated system files or env vars, but the runtime behavior (managing local Obsidian notes) implicitly requires filesystem access to the user's vault; SKILL.md does not specify how the vault path is discovered or limited.

Install Mechanism

There is no formal install spec in the registry; the instructions tell users to run `pip install cli-obsidian`. Installing an unvetted PyPI package or similarly sourced package can execute arbitrary code on install/runtime. The skill has no homepage or source link to verify the package, increasing risk.

Credentials

The skill declares no required environment variables, credentials, or config paths — this is proportionate. However, because it operates on local notes, the agent or installed package will need filesystem access; that implicit access is not declared but is reasonable for the stated purpose.

Persistence & Privilege

always is false and model invocation is allowed (default). The skill does not request persistent system-wide privileges or modification of other skills' configs; no elevated persistence requested.

What to consider before installing

This skill appears to do what it claims, but exercise caution before installing or granting it access to your machine. Steps to reduce risk: - Do not pip-install the package until you can verify its source: check the package on PyPI (or request the maintainer/source code), review the repository and recent releases, and confirm the publisher identity. - Prefer installing in an isolated environment (virtualenv/container) when testing. - Inspect the package source for any network calls, telemetry, or code that reads arbitrary paths before trusting it with your Obsidian vault. - If you want the agent to operate on a specific vault, prefer skills that require an explicit vault path or a narrowly scoped token/file rather than leaving the agent to search the filesystem. - If the vendor provides no homepage or source, treat the package as higher risk and avoid installing on sensitive systems.

Obsidian 命令行工具 - 让 AI Agent 直接操作你的笔记

功能

• 命令行创建/搜索/管理笔记
• 支持标签系统
• JSON 输出，完美对接 AI Agent
• 跨平台支持（Win/Mac/Linux）

安装

pip install cli-obsidian

使用

# 创建笔记
cli-obsidian create "会议记录" --tag work

# 搜索笔记
cli-obsidian search "AI Agent"

# 列出笔记
cli-obsidian list --tag work

定价

• 标准版: ¥68 一次性
• 永久使用授权
• 免费更新

作者

CLI Skill Factory