Agent Economy ReportAgent Economy ReportCAUTION version 1.0.0 · audited 2026-09-17
This skill is an instruction set for locating and working with Obsidian vaults through the obsidian-cli tool. It tells an agent to read the local Obsidian configuration to find vaults and to run shell commands for setting a default vault, searching, creating, moving, and deleting notes, plus direct Markdown edits. The package also declares an installation step that pulls obsidian-cli from a third-party Homebrew tap. No hidden network destinations, credential collection, persistence, wallet redirection, obfuscation, or malicious code were observed. The main reasons for caution are the third-party dependency and destructive commands such as move and delete.
| Declared purpose | Work with Obsidian vaults (plain Markdown notes) and automate via obsidian-cli. |
| Observed behavior | The skill provides Markdown guidance for reading ~/Library/Application Support/obsidian/obsidian.json or using obsidian-cli print-default to identify vaults. It lists obsidian-cli commands for set-default, print-default, search, search-content, create, move, and delete. It also advises direct editing of .md files. The frontmatter declares obsidian-cli as a required binary and provides a Homebrew install formula. The skill card discloses the third-party tap and recommends reviewing move/delete commands. |
| Verdict, rules only | SAFE |
| Verdict, AI | CAUTION |
| Final verdict | CAUTION (never better than either pass) |
| capability | vs purpose | detail |
|---|---|---|
| shell | needed | SKILL.md lines 36, 40-53 instruct the agent to run obsidian-cli shell commands such as set-default, search, create, move, and delete. |
| filesystem_read | needed | SKILL.md lines 21 and 27 tell the agent to read the local Obsidian config file ~/Library/Application Support/obsidian/obsidian.json. |
| filesystem_write | needed | SKILL.md lines 43-55 describe creating, moving, deleting, and directly editing notes, which modifies local vault files. |
| install_packages | needed | SKILL.md line 5 declares a Homebrew install for yakitrak/yakitrak/obsidian-cli, which installs the required obsidian-cli binary. |
| network | needed | SKILL.md line 5 implies network access for Homebrew installation; SKILL.md line 4 and skill-card.md lines 9 and 34 contain documentation/publisher links only. |
| severity | finding |
|---|---|
| medium | Third-party Homebrew tap installation The skill declares that obsidian-cli is required and will be installed via the third-party Homebrew tap yakitrak/yakitrak. A user should trust-check this tap and binary before installation. SKILL.md:5 metadata: {"clawdbot":{"emoji":"💎","requires":{"bins":["obsidian-cli"]},"install":[{"id":"brew","kind":"brew","formula":"yakitrak/yakitrak/obsidian-cli","bins": |
| info | Reads local Obsidian vault configuration The skill tells the agent to read the local Obsidian desktop configuration file to identify vault locations. This is local filesystem access needed for vault discovery. SKILL.md:21 - `~/Library/Application Support/obsidian/obsidian.json` |
| low | Sets a default vault The agent may run this command to configure a default Obsidian vault. This changes local obsidian-cli configuration. SKILL.md:36 - `obsidian-cli set-default "<vault-folder-name>"` |
| low | Creates notes via Obsidian URI handler The agent may create notes with specified content and open them. This writes new Markdown files in the vault. SKILL.md:44 - `obsidian-cli create "Folder/New note" --content "..." --open` |
| medium | Moves or renames notes and updates links The agent may move or rename notes and update wikilinks and Markdown links across the vault. This is a broad write operation that can affect many files. SKILL.md:49 - `obsidian-cli move "old/path/note" "new/path/note"` |
| medium | Deletes notes The agent may delete a note by path. This is a destructive operation and should be reviewed before execution. SKILL.md:53 - `obsidian-cli delete "path/note"` |
| info | Direct Markdown edits The skill permits direct editing of .md vault files outside obsidian-cli. This is within the declared purpose but is a filesystem write capability. SKILL.md:55 Prefer direct edits when appropriate: open the `.md` file and change it; Obsidian will pick it up. |
| info | Published risk disclosure The skill card itself acknowledges the third-party Homebrew tap and binary that can access local vault files. skill-card.md:24 Risk: The skill depends on a third-party Homebrew tap and obsidian-cli binary that can access local Obsidian vault files. |
| info | Published risk disclosure for destructive operations The skill card warns that move and delete operations can modify synced or work vault content. skill-card.md:28 Risk: Move and delete operations can modify synced or work vault content. |
| info | Recommended mitigation The skill card recommends reviewing move, rename, and delete commands before execution. skill-card.md:30 Mitigation: Review proposed move, rename, and delete commands before execution. |
0 AI finding(s) were dropped because their file, line or quote did not match the package.
| domain | service rating | where |
|---|---|---|
| clawhub.ai | not in the service index | skill-card.md:9 |
| help.obsidian.md | not in the service index | SKILL.md:4 |
| Binaries invoked | none |
| Environment variables read | none |
| Hard-coded wallets | none |
| Pipes a download to a shell | 0 |
| eval / exec / subprocess | 0 |
| base64 blobs | 0 |
| File writes | 1 |
| Persistence | 0 |
| file | lines | sha256 |
|---|---|---|
SKILL.md | 55 | dc45b522a0f08fa1… |
_meta.json | 6 | 097709ff9fc7c56a… |
skill-card.md | 52 | eb2a6bdbebb689b4… |
For agents
JSON: https://agenteconomy.report/k/obsidian.audit.json · badge: https://agenteconomy.report/k/obsidian.audited.svg ·
skill rating: /k/obsidian · commission an audit of any skill: US$ 29 per version.
The complete published package of this exact version was downloaded from the registry and read statically; nothing was executed. A deterministic pass extracts network destinations, binaries, environment variables, writes, install commands, obfuscation markers, subprocesses and wallets, each with file and line. An AI then reads the whole package with those facts and writes the summary, the capabilities and the findings under a strict schema; every finding it produces must cite a file, a line and the exact text, or it is dropped. The final verdict is the worst of the two passes. The audit does not change the skill's trust tier (policy); the author may respond through the dispute channel and the response is published here. Commissioned by: the Agent Economy Report (free program: the 150 most downloaded skills, September 2026).