Obsidian Save Article

将网页文章保存到本地 Obsidian Vault，支持图片抓取、Markdown 转换、YAML frontmatter 和用户笔记附加。

This skill is coherent with its stated goal, but take these precautions before installing: (1) Review the included Python scripts (they are bundled and will be executed locally) and only use if you trust the source. (2) When configuring the vault path, point it to a folder you control (don’t accidentally point to system folders or other apps’ data). (3) The skill will fetch arbitrary web pages and download images — avoid using it on pages containing highly sensitive personal data unless you understand how the browser tool and scripts capture content. (4) Because exec/read/write are allowed, run this skill in a normal user account (not as root) and consider sandboxing if you are uncertain. (5) No secrets or unrelated credentials are requested by the skill; if a future version asks for API keys or cloud credentials, treat that as a red flag.

Type: OpenClaw Skill Name: obsidian-save-article Version: 1.1.0 The skill requires high-privilege permissions (exec, Write, network) to save articles to an Obsidian Vault. A potential shell injection vulnerability exists in SKILL.md where the agent is instructed to pass user-provided URLs and paths directly to a Python script via shell command execution. Additionally, the skill maintains persistence by storing configuration data in the user's home directory (~/.obsidian-save-article-config.json) and performs arbitrary network requests to external services like r.jina.ai and various image hosts in scripts/download_images.py.