Obsidian 1
PassAudited by VirusTotal on May 11, 2026.
Overview
Type: OpenClaw Skill Name: obsidian-1 Version: 1.0.0 The obsidian skill bundle provides a legitimate interface for managing Obsidian vaults using the third-party 'obsidian-cli' tool. It includes instructions for locating vault configurations in the standard macOS application support directory and performing common note operations like searching, creating, and refactoring links. No malicious behavior, data exfiltration, or suspicious command execution patterns were identified.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If invoked on the wrong path or vault, the agent could change or remove notes the user wanted to keep.
The skill documents commands that can create, move, and delete notes in a user's Obsidian vault. This is aligned with the stated purpose, but it gives the agent real local data mutation capability.
Create - `obsidian-cli create "Folder/New note" --content "..." --open` Move/rename (safe refactor) - `obsidian-cli move "old/path/note" "new/path/note"` Delete - `obsidian-cli delete "path/note"`
Confirm the target vault and note path before move/delete operations, and keep vault backups or version control if using automated edits.
Private note content could be exposed to the agent during searches, and misleading text inside notes could influence the agent if not treated as ordinary user data.
The skill can retrieve persistent note content into the agent context and edit that persistent content. Obsidian notes may be private and should not automatically be treated as authoritative instructions.
`obsidian-cli search-content "query"` (inside notes; shows snippets + lines) Prefer direct edits when appropriate: open the `.md` file and change it; Obsidian will pick it up.
Use specific queries and vault paths, avoid unnecessary searches over sensitive notes, and treat retrieved note text as content to analyze rather than instructions to obey.
The external CLI will be used to access and modify local Obsidian vault files.
The skill depends on an external Homebrew tap to provide the obsidian-cli binary. This is disclosed and purpose-aligned, but it means the installed external tool must be trusted.
brew | formula: yakitrak/yakitrak/obsidian-cli | creates binaries: obsidian-cli
Review or trust the Homebrew formula/source before installing, and keep the CLI updated from a trusted source.