Xiaodi Obsidian Brain Pro

WhatsApp/Telegram → Obsidian 智能记忆增强，防幻觉纠偏，隐私脱敏，让碎碎念自动变成结构化知识（开车/工地语音输入友好）

Before installing or enabling this skill: - Review and test scripts in a sandbox: inspect push_to_git.sh/sync.sh and search_engine.py and run them manually with test data to see what is pushed and where. - Configure OLLAMA_BASE_URL explicitly (prefer localhost) — do not rely on the default http://192.168.3.120:11434. - Disable or verify Git backup before first run: set git_backup.enabled to false in _meta.json or ensure the repo/remote is a private test repo. Confirm what remote 'origin' points to and that you control it. - Do not run with secrets present in your Obsidian vault until you are confident redaction works; the redaction is heuristic and can miss unusual token formats. Consider sanitizing notes before enabling auto-push. - Limit the agent's permissions during testing (run as a user with minimal Git credentials, or run inside an isolated container/VM with a disposable vault). - If you plan to use Ollama, deploy it locally and point OLLAMA_BASE_URL to a host you control; confirm embedding requests do not leak to external networks. - If uncertain, run search_engine.py manually to verify behavior and outputs and verify no unexpected network endpoints are contacted. These checks will reduce the risk of accidental data leakage or misconfiguration. If you want, I can list the exact lines to change to disable Git push by default or to tighten the redaction heuristics.

Type: OpenClaw Skill Name: xiaodi-obsidian-brain-pro Version: 1.1.4 The skill bundle provides a legitimate utility for syncing Obsidian notes to a Git repository and performing local semantic search via Ollama. It includes proactive security measures in its system prompts (prompts/organizer.txt), specifically instructing the AI agent to redact sensitive information like API keys and passwords before saving or pushing data. While the search script (scripts/search_engine.py) contains a hardcoded local IP address (192.168.3.120) and the sync scripts (scripts/sync.sh) execute shell commands for Git operations, these behaviors are consistent with the stated purpose of the tool and show no evidence of malicious intent or unauthorized data exfiltration.