ZappushZappush
SkillsUse CasesBenchmarkCommunitySign In
      Back to Skills
      bastos

      Safety Report

      Obsidian Daily

      @bastos

      Manage Obsidian Daily Notes via obsidian-cli. Create and open daily notes, append entries (journals, logs, tasks, links), read past notes by date, and search vault content. Handles relative dates like "yesterday", "last Friday", "3 days ago".

      3,698Downloads
      23Installs
      0Stars
      4Versions
      Search & Retrieval2,116CLI & Shell Tools1,805Project Management1,537Notes & Knowledge902

      Security Analysis

      medium confidence
      Suspicious0.08 risk

      The skill's instructions match its stated purpose, but there are mismatches and sloppy artifacts (missing declared dependency, git conflict markers, unknown source) that make the package questionable until verified.

      Feb 11, 20261 files3 concerns
      Purpose & Capabilityconcern

      The SKILL.md clearly requires obsidian-cli (and shell date utilities) to manage Obsidian daily notes, which is consistent with the description — but the skill's registry metadata lists no required binaries or environment variables. That mismatch between declared requirements and actual runtime instructions is an inconsistency that should be resolved before trusting the skill.

      Instruction Scopenote

      Instructions are limited to running obsidian-cli and date commands to create/read/append notes and to prompt the user for vault configuration. They do not instruct exfiltration or access unrelated system files. However, the SKILL.md contains leftover git merge conflict markers (<<<<<<< >>>>>>>) in its header, which indicates the file wasn't cleaned up and could hide unexpected content or errors.

      Install Mechanismnote

      This is an instruction-only skill (no install spec). The SKILL.md tells users to install obsidian-cli via Homebrew or Scoop, which is reasonable, but the absence of an install section in the registry metadata means the runtime dependency is only documented in prose — another mismatch to verify.

      Credentialsok

      The skill declares no environment variables or credentials and the instructions do not request secrets. It will read and write files in the user's Obsidian vault (via obsidian-cli), which is appropriate for its purpose but may expose sensitive personal notes if the user grants the agent filesystem access.

      Persistence & Privilegeok

      The skill does not request permanent presence (always:false) and does not modify other skills or system-wide settings beyond using obsidian-cli to set a default vault if the user configures it. Note: agents are allowed to invoke skills autonomously by default; this is expected but means the agent could run these local commands without further prompts if permitted.

      Guidance

      Before installing: 1) Verify you have (or will install) obsidian-cli and are comfortable allowing the agent to run it — the skill will read and modify files in your Obsidian vault. 2) The registry metadata omits the required binary; treat that as an indicator to inspect the SKILL.md yourself. 3) The SKILL.md contains git merge conflict markers — ask the publisher for a clean, versioned source or prefer a skill with a known homepage/repo. 4) If you proceed, test with a non-sensitive vault or backup your notes first, and only grant the agent filesystem access when you trust the skill's origin.

      Latest Release

      v1.2.1

      No changes detected in this release. - Version 1.2.1 was published without any file or documentation changes.

      More by @bastos

      Conventional Commits

      3 stars

      topydo

      1 stars

      pass - stores, retrieves, generates, and synchronizes passwords securely

      0 stars

      self-improving-agent

      @pskoett · 1,456 stars

      Gog

      @steipete · 672 stars

      Tavily Web Search

      @arun-8687 · 620 stars

      Published by @bastos on ClawHub

      Zappush© 2026 Zappush
      HomeGuaranteeSupport

      Something feels unusual? We want to help: [email protected]