← Back to Skills Marketplace
351
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install obsidian-official-cli-headless
Description
Install and adapt the official Obsidian CLI for headless Linux servers by using a non-root user, Xvfb virtual display, ACL-based vault access, and an obs wra...
Usage Guidance
This skill appears to do what it says: adapt the official Obsidian desktop package for headless servers. Before installing, be aware it must be run as root and will: install system packages, download and install a .deb from GitHub releases, create a system user 'obsidian', write a wrapper to /usr/local/bin, and modify ACLs (possibly granting traversal on /root). Recommended steps:
- Review the three scripts line-by-line (you were provided them) and confirm paths, usernames, and the DEB_URL before running.
- Run first in an isolated VM or test host, not on production, to validate behavior.
- If your vault is under /root, understand the ACL change: it will allow the obsidian user to traverse /root and read/write the vault. Consider moving the vault to a non-root path if that is a concern.
- Note optional env vars (OBSIDIAN_VERSION, OBSIDIAN_USER, WRAPPER_PATH, OBS_CMD) can alter behavior — set them intentionally or leave defaults.
- If you need stricter assurance, build the .deb from a pinned checksum or manually verify the downloaded release before apt installing.
Capability Analysis
Type: OpenClaw Skill
Name: obsidian-official-cli-headless
Version: 1.0.0
The skill bundle performs high-risk system modifications, including running scripts as root, downloading an external binary from GitHub (obsidian-releases), and modifying permissions on the '/root' directory using ACLs to allow a non-root user traversal access. Additionally, the wrapper script creation in 'scripts/configure_official_cli.sh' is vulnerable to command injection because the 'VAULT_PATH' variable is placed directly into a shell command string within a heredoc without sufficient sanitization, allowing potentially malicious vault paths to execute arbitrary commands when the wrapper is invoked.
Capability Assessment
Purpose & Capability
The scripts implement exactly what the name/description promise: install the official Obsidian .deb, create a dedicated non-root user, provide an Xvfb-based wrapper, configure the official CLI JSON, and set ACLs for a vault (including vaults under /root). The workflow and required system changes are proportionate to the stated goal. Minor metadata omission: the package/script runtime expects utilities like apt-get, curl, setfacl, xvfb-run and realpath even though the registry metadata lists no required binaries.
Instruction Scope
SKILL.md and the scripts stay within the described scope: they instruct an admin to run the provided install/configure/verify scripts as root to enable a headless adaptation. The scripts read/write system paths (/usr/local/bin, /home/obsidian, /root) and write the wrapper and config files as intended. Note: the wrapper and configure scripts embed configured paths/usernames into a su -c command; these values are set at install time (root) but should be chosen carefully to avoid accidental injection-like issues.
Install Mechanism
Install uses apt-get to install dependencies and downloads the Obsidian .deb from the official GitHub releases URL (github.com/obsidianmd/obsidian-releases), then installs the .deb. This is an expected, traceable mechanism for installing the official desktop package on Debian-like systems; it requires root and will install system packages.
Credentials
The skill does not request secrets or service credentials (no AWS/third-party tokens). Scripts accept optional environment variables (OBSIDIAN_VERSION, OBSIDIAN_USER, WRAPPER_PATH, OBS_CMD) to customize behavior, but these env-vars are not declared in registry metadata — this is reasonable but should be documented for operators because changing them can alter install targets and runtime binaries.
Persistence & Privilege
The skill does not request 'always:true' or autonomous elevation, but it requires root to run and will create a system user, write a wrapper to /usr/local/bin, set ACLs (including traversal on /root), and install packages. Those are necessary for the stated goal but are high-privilege operations; the skill will persist on the system until removed.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install obsidian-official-cli-headless - After installation, invoke the skill by name or use
/obsidian-official-cli-headless - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of obsidian-official-cli-headless skill.
- Enables installation and adaptation of the official Obsidian CLI for headless Linux servers using non-root user, Xvfb, ACLs, and a command wrapper.
- Focuses on vault access, basic CLI enablement, verification of key commands, and minimal permissions.
- Provides scripts and guidance for setup, configuration, verification, and reporting in headless environments.
- Excludes plugin, sync, and GUI-related features unless explicitly requested.
Metadata
Frequently Asked Questions
What is Obsidian Official CLI Headless?
Install and adapt the official Obsidian CLI for headless Linux servers by using a non-root user, Xvfb virtual display, ACL-based vault access, and an obs wra... It is an AI Agent Skill for Claude Code / OpenClaw, with 351 downloads so far.
How do I install Obsidian Official CLI Headless?
Run "/install obsidian-official-cli-headless" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Obsidian Official CLI Headless free?
Yes, Obsidian Official CLI Headless is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Obsidian Official CLI Headless support?
Obsidian Official CLI Headless is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Obsidian Official CLI Headless?
It is built and maintained by DarinRowe (@darinrowe); the current version is v1.0.0.
More Skills