Obsidian
PassAudited by ClawScan on May 1, 2026.
Overview
The skill is a coherent Obsidian helper, but it can search, create, move, and delete local notes through obsidian-cli, so users should use it intentionally.
This skill appears benign and purpose-aligned for managing Obsidian Markdown vaults. Before installing, make sure you trust the obsidian-cli Homebrew source, and when using it, be explicit about which vault and note paths the agent may read or modify. Confirm destructive actions such as delete or broad refactors before letting the agent run them.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If invoked on the wrong path, the agent could remove an Obsidian note.
The skill documents a command that can delete user notes. This is aligned with Obsidian automation and is presented as a user-facing command reference, not hidden automatic behavior.
Delete - `obsidian-cli delete "path/note"`
Use explicit note paths and ask for confirmation before move, rename, or delete actions.
The installed obsidian-cli binary will have whatever local file access the user grants through normal command execution.
The skill depends on an external Homebrew formula for obsidian-cli. Installing a CLI is central to the skill, but users should recognize they are trusting that package source.
brew | formula: yakitrak/yakitrak/obsidian-cli | creates binaries: obsidian-cli
Review or trust the Homebrew formula and obsidian-cli project before installation, especially if using it with sensitive vaults.
Search results and note snippets may expose personal, work, or confidential note content to the assistant during use.
The skill can retrieve local note contents into the agent context. This is expected for an Obsidian helper, but vault notes may contain private or sensitive information.
`obsidian-cli search-content "query"` (inside notes; shows snippets + lines)
Limit searches and edits to the intended vault and avoid asking the agent to inspect notes that contain secrets or highly sensitive information.