Obsidian Official Cli 1.0.0

Work with Obsidian vaults using the official Obsidian CLI (v1.12+). Open, search, create, move, and manage notes from the terminal. Use when working with Obs...

This skill appears to be an instruction-only helper that runs your local 'obsidian' CLI to read and modify vaults — that behavior is coherent with its description. Before installing: 1) Verify provenance: the registry owner ID, README GitHub links, and _meta.json owner are inconsistent; confirm you trust the publisher and download the .skill file from the official source. 2) Back up your vaults — CLI commands can modify or delete notes and plugins. 3) Confirm you have Obsidian 1.12+ with CLI enabled and understand that Obsidian Sync operations will use the local app's account. 4) Be cautious with plugin/theme install or 'plugin:uninstall' commands — they can change your environment. If you need more assurance, ask the publisher for the exact release URL or a signed package before proceeding.

Type: OpenClaw Skill Name: obsidian-official-cli-1-0-0 Version: 1.0.0 The skill provides an interface for the Obsidian CLI that includes high-risk capabilities such as arbitrary JavaScript execution via `obsidian eval` and screen capture via `obsidian dev:screenshot` (SKILL.md). While these are presented as developer tools for a purported 'official' CLI (v1.12+), they represent significant vectors for Remote Code Execution (RCE) and data exfiltration within the Obsidian environment. There is no evidence of intentional malice, but the broad access to application internals and file systems via the CLI warrants a suspicious classification.