Obsidian Clip

Create and manage Obsidian “Clip” notes (web/article/page clips). Use when the user says “clip/剪藏/收藏/保存这个链接”, wants a readable summary of a URL, and wants it...

This skill appears safe and does what it says: it summarizes URLs and writes a note to a local Obsidian vault using the included script. Before enabling or using it, check these practical points: (1) confirm the vault path (OBSIDIAN_VAULT) so notes are saved where you expect; (2) be aware that the agent may fetch pages or open a browser to access content — do not use it to fetch pages that require you to expose credentials to an untrusted/hosted agent; (3) review the bundled script if you have strict filesystem or filename policies (it does basic sanitization but will create files under the vault); (4) if you run the agent on a remote server, ensure you are comfortable with the vault location and any web requests performed. If those are acceptable, the skill's design and permissions are proportionate to its purpose.

Type: OpenClaw Skill Name: obsidian-clip Version: 0.1.2 The `scripts/clip_save.sh` script is vulnerable to shell injection and path traversal. The `OBSIDIAN_VAULT` environment variable, which determines the base directory for saving notes, is used directly in a `mkdir -p` command without sanitization. If an attacker can control this environment variable (e.g., via prompt injection against the agent or a compromised environment), they could inject arbitrary shell commands, leading to Remote Code Execution (RCE), or write files to arbitrary locations on the filesystem. This is a critical vulnerability, not intentional malice.