Organize Vault

PassAudited by ClawScan on May 7, 2026.

Overview

This skill is coherent for organizing a Markdown vault, but it will read note contents and move/write files, so users should review the proposed changes and keep a reliable git backup.

Before installing or using this skill, make sure the selected vault is the intended one, start from a clean git state with a recent commit or backup, and review every proposed move and MOC update before approving execution.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A mistaken classification or path issue could reorganize many notes and affect links or workflows.

Why it was flagged

The skill instructs the agent to perform local filesystem mutations, including bulk moves, writes, directory creation, and removal of empty directories. This is expected for a vault organizer and is gated by confirmation, but it is still a user-visible operational risk.

Skill content
用户确认后,按以下顺序执行:1. `mkdir -p` 创建所有主题目录 2. `mv` 移动所有笔记文件 ... 5. `rmdir` 清理空目录
Recommendation

Review the full preview carefully, confirm only intended moves, and commit or back up the vault before running bulk changes.

What this means

Private note content may be processed by the agent, and short summaries/descriptions may become visible in generated MOC files.

Why it was flagged

The skill reads full Markdown note bodies to classify them and extract descriptions, and those descriptions may be written into MOC.md files. This is purpose-aligned, but notes can contain private or untrusted content.

Skill content
对每个新笔记,Read 其全文 ... 逐批读取笔记全文(每批 10-15 篇)
Recommendation

Use it only on the intended vault, review generated descriptions, and exclude especially sensitive notes if they should not be summarized.

What this means

The skill may fail or behave inconsistently on systems missing the expected tools or with incompatible shell behavior.

Why it was flagged

The metadata does not declare required tools, while the SKILL.md workflow uses command-line utilities such as git, find, grep, awk, mv, mkdir, and rmdir. This is not suspicious by itself, but users should know the runtime assumptions.

Skill content
Required binaries (all must exist): none ... Install specifications: No install spec — this is an instruction-only skill.
Recommendation

Ensure git and the standard file utilities used by the workflow are available before relying on the skill.

What this means

A user could overestimate how easy it will be to undo a large reorganization after confirming it.

Why it was flagged

The rollback assurance is helpful but simplified: uncommitted working-tree changes, untracked notes, and empty-directory removals may not be undone specifically with `git revert` unless the user has committed an appropriate baseline.

Skill content
所有变更受 git 追踪,可通过 git revert 撤销。
Recommendation

Start from a clean git state, make a commit or backup before running, and know whether `git restore`, `git reset`, or `git revert` is the correct recovery command for your workflow.