Obsidian Official CLI Skill

Work with Obsidian vaults using the official Obsidian CLI (v1.12+). Open, search, create, move, and manage notes from the terminal. Use when working with Obsidian vaults for note management, file operations, searching content, managing tasks, properties, links, plugins, themes, sync operations, or any command-line interaction with Obsidian.

This skill appears to do what it says — it runs your local obsidian CLI and can read and change files in your vault. Before installing: (1) verify the skill package comes from a trusted source (the registry shows no homepage/source even though README references a GitHub releases URL), (2) back up your vaults, (3) test the obsidian CLI manually (obsidian version; a few safe read commands) to confirm your setup, (4) be aware the agent can run destructive commands (delete/move, plugin install/enable), so only allow the skill if you trust the skill/publisher or run it in a sandbox/test vault. If provenance is unclear, prefer skills with a verifiable repository or official homepage.

Type: OpenClaw Skill Name: obsidian-official-cli Version: 1.0.0 The skill exposes the `obsidian eval` command in `SKILL.md`, which allows arbitrary JavaScript code execution within the Obsidian application context. While a legitimate developer tool, its exposure to an AI agent creates a significant prompt injection vulnerability. A malicious user prompt could instruct the agent to use this command to exfiltrate sensitive data, modify Obsidian settings, or perform other unauthorized actions within the application, making this a high-risk capability.