Obsidian Sync KB

Build a searchable local knowledge base from an Obsidian vault's "笔记同步助手" inbox, then answer with citations, topic cards, update logs, and daily digests for...

Security Scan

The skill's code and instructions are consistent with building a local Obsidian-based knowledge base; it reads the vault, optionally fetches external sources, and writes research/artifact files into the vault and the skill directory.

Purpose & Capability

Name/description match the implementation: scripts read an Obsidian vault inbox, normalize notes, chunk them, build an index, and produce research/topic cards and digests. Required permissions and resources declared (vault path or env var) are proportionate to the stated purpose.

Instruction Scope

SKILL.md only instructs running the included Python scripts and documents an explicit --disable-network option. The code will write files into the vault (Research/… directories) and into local artifacts/state directories — this is consistent with 'build topic cards and update logs' but users should be aware that the skill modifies the vault by creating research artifacts.

Install Mechanism

No install spec; this is instruction- and script-based (python). That is lowest install risk. The scripts are included in the bundle rather than downloaded from arbitrary URLs.

Credentials

No credentials or unrelated environment variables requested. The only optional env var referenced is OBSIDIAN_SYNC_KB_VAULT to set the vault root, which is appropriate.

Persistence & Privilege

always:false and no requests to alter other skills or system-wide agent config. The skill persists state and artifacts under its own directories and writes research files into user-specified vault paths — expected for its function.

Scan Findings in Context

[pre-scan-injection-signals] expected: Static scanner found no injection signals. The code uses urllib.request for optional external fetches which is expected for source enrichment.

Assessment

This skill appears to do what it says, but review and test before pointing it at sensitive notes. It will create files in your Obsidian vault (Research/… directories) and maintain local state/artifacts under the skill folder — back up your vault first. If you are concerned about data leakage, run build-index with --disable-network (or set enable_network to false in config) to avoid external fetches. Inspect scripts/kb_tool.py (network calls, where content is written, and any outbound requests) before use; the code is included so you can audit it. Note: the code contains minor bugs (e.g., a likely typo in normalize_whitespace) suggesting it may be lightly tested — run on a copy of your vault first and check logs/output for unexpected behavior.

Turn an Obsidian 笔记同步助手 inbox into a local retrieval-ready knowledge base for OpenClaw.

Setup

Initialize the skill for a specific vault:

python3 scripts/setup_config.py --vault-root "/absolute/path/to/ClawVault"

The setup script writes scripts/config.yaml. You can also skip setup and set OBSIDIAN_SYNC_KB_VAULT=/absolute/path/to/ClawVault.

Commands

Build or refresh the index:

python3 scripts/kb_tool.py build-index
python3 scripts/kb_tool.py build-index --force-full-rescan
python3 scripts/kb_tool.py build-index --disable-network

Query the inbox knowledge base:

python3 scripts/kb_tool.py query "怎么更好让 AI 做检索"
python3 scripts/kb_tool.py query "OpenClaw harness" --topic openclaw --format json

Promote and curate:

python3 scripts/kb_tool.py promote
python3 scripts/kb_tool.py star retrieval-rag --type topic
python3 scripts/kb_tool.py stats

Behavior

• Treat the synced inbox as read-only source material.
• Build normalized docs, chunks, topic cards, update logs, and a daily change digest.
• Prefer source notes, original URLs, and obsidian:// references before external search.
• Return 简要结论, 相关文章, 关键摘录, and 引用来源.
• Every citation must include the Obsidian path and original URL when available.
• If a hit is a bad_capture or needs_manual_access, make that explicit instead of treating it as a valid source.