Obsidian Cli Tool

Interact with Obsidian vaults using the Obsidian CLI to read, create, search, and manage notes, tasks, properties, and more. Also supports plugin and theme d...

This skill appears to do what it claims (control Obsidian via the obsidian CLI), and it asks for no external credentials. Before installing or enabling it for autonomous use, consider: 1) ensure the local 'obsidian' CLI and the Obsidian CLI plugin are what you expect (trustworthy source); 2) do not allow autonomous agent invocation if you don't want the agent to run destructive or arbitrary-code commands (plugin eval and delete); 3) backup your vault before permitting operations that modify or delete notes; and 4) prefer manual review of any commands the agent proposes that use plugin eval or other high-impact operations. If you want stricter safety, request the skill declare the 'obsidian' binary dependency and consider restricting the set of allowed commands (e.g., disable eval/delete) or only use in a disposable/testing vault.

Type: OpenClaw Skill Name: obsidian-cli-tool Version: 1.0.0 The skill bundle documents high-risk capabilities, specifically the `obsidian plugin eval '<code>'` command in SKILL.md, which allows for arbitrary JavaScript execution within a running Obsidian instance. While intended for plugin development, this provides a direct vector for Remote Code Execution (RCE) and data exfiltration if the AI agent is targeted by prompt injection. Furthermore, the `plugin screenshot` and `plugin dom` commands allow for capturing sensitive UI state, posing a significant privacy risk without explicit security boundaries.