Obsidian Perfect

Especialista em Obsidian com domínio em Zettelkasten, PARA, BASB, MOCs, Dataview, Templater e organização estruturada de vaults.

This skill is functionally consistent with an Obsidian Local REST API integration, but there are notable mismatches you should resolve before installing: - Confirm required environment variables: package.json and README require OBSIDIAN_API_KEY and OBSIDIAN_URL, but the registry metadata claimed none. Expect to provide an API key and URL. - Understand scope: the skill reads and writes your entire vault (creates/moves/deletes notes, modifies canvases, runs searches). Only install if you trust the skill and are comfortable granting that level of access. - Ensure OBSIDIAN_URL is pointed to your local Obsidian plugin (e.g. https://127.0.0.1:27124). Do NOT point it to a remote or unknown URL — doing so could send your vault contents to an external server. - Review the bundled code (the tools/*.js files) yourself or run them in a sandbox/VM first. The package includes many executable files (no external install step), so copying the skill into your environment will allow it to run. - Back up your vault before enabling the skill, and consider limiting exposure (use a dedicated vault or test vault) until you’ve validated behavior. Because some source files were truncated in the submission, consider asking the author for: (1) a clear list of required env vars in the registry metadata, (2) confirmation that OBSIDIAN_URL defaults to localhost and (3) a signed/hosted release or repository link you can inspect fully. If you want, I can produce a checklist of specific files and code patterns to review for exfiltration (e.g., any hardcoded external URLs, non-local default for OBSIDIAN_URL, or use of remote network libraries).

Type: OpenClaw Skill Name: obsidian-master Version: 1.0.0 The Obsidian Master skill bundle is a comprehensive and well-structured toolset for managing an Obsidian vault via the Local REST API. It implements productivity methodologies like PARA and Zettelkasten, providing 66 tools for note CRUD operations, Canvas manipulation, vault diagnostics (health/stats), and automated Map of Content (MOC) generation. The code is modular, lacks external dependencies, and follows security best practices such as requiring explicit confirmation and performing automatic archiving (moving to an archive folder) before deleting files or folders. No indicators of data exfiltration, malicious execution, or harmful prompt injection were found; all behaviors are strictly aligned with the stated purpose of personal knowledge management.