Skills project-to-obsidian
📦

project-to-obsidian

v1.4.0 Content revision r1 High Risk 📁 Filesystem access⚙️ External commands

Convert Projects into Obsidian Knowledge Bases

Project knowledge is often scattered across code, comments, and docs. This skill turns a codebase into linked Obsidian notes for navigation and maintenance.

Supports: Claude Codex Code(CC)
⚠️ 38 Poor

This skill is part of a pack

Install the whole pack to get every skill the task needs, in one command.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "project-to-obsidian" from https://skillstore.io/skills/zhanlincui-project-to-obsidian.md and its manifest at https://skillstore.io/api/skills/zhanlincui-project-to-obsidian/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Test it

Using "project-to-obsidian". User requests a quick overview for a TypeScript service.

Expected outcome:

The skill produces a project overview, directory structure note, technology stack note, and links between key modules.

Using "project-to-obsidian". User requests API documentation for a backend.

Expected outcome:

The skill creates endpoint notes with methods, parameters, responses, source file references, and related module links.

Using "project-to-obsidian". User requests full Obsidian vault output.

Expected outcome:

The skill asks for confirmation, creates a project knowledge base, adds indexes, and writes linked notes to the chosen destination.

Security Audit

High Risk
v4 • 7/8/2026 Open versioned report

Most static alerts are false positives caused by Markdown code fences, slash-command examples, Obsidian links, Mermaid diagrams, and normal Claude skill installation instructions. I confirmed the .env and configuration scanning guidance because it can expose credentials when generated notes capture environment values. No prompt injection or covert exfiltration language was found.

7
Files scanned
1,074
Lines analyzed
1
Review items
0
False positives ignored

Confirmed security concerns (2)

High
Environment file access
- **/.env*, **/config.* # 配置文件
The scan pattern targets environment files and config files that commonly store secrets. The skill also generates configuration documentation, creating a credible disclosure risk.
High
Potential Secret Disclosure in Generated Documentation
The workflow scans .env and config files, then extracts environment variables and configuration into generated Obsidian documentation. Without redaction, notes can expose credentials or private endpoints.
The file scan pattern and later extraction requirements are explicit. I did not find redaction rules that prevent secret values from being written to notes.
Capability review items (1)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High
Hidden file access
- **/.env*, **/config.* # 配置文件
The workflow explicitly includes **/.env* in project scans. Hidden environment files often contain credentials, and generated notes may expose those values.
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/zhanlincui-project-to-obsidian/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/zhanlincui-project-to-obsidian/security.svg)](https://skillstore.io/skills/zhanlincui-project-to-obsidian?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/zhanlincui-project-to-obsidian?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/zhanlincui-project-to-obsidian/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/zhanlincui-project-to-obsidian.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

Claude Code. (2026). project-to-obsidian security audit report (audit version 4) [Author version 1.4.0]. Skillstore. https://skillstore.io/skills/zhanlincui-project-to-obsidian/audits/4

BibTeX citation

@techreport{claude-code-zhanlincui-project-to-obsidian-2026, author = {Claude Code}, title = {project-to-obsidian security audit report (audit version 4)}, institution = {Skillstore}, year = {2026}, number = {4}, url = {https://skillstore.io/skills/zhanlincui-project-to-obsidian/audits/4}, note = {Author version 1.4.0} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "project-to-obsidian security audit report (audit version 4)" version: "1.4.0" type: report authors: - name: "Claude Code" date-released: "2026-07-08" url: "https://skillstore.io/skills/zhanlincui-project-to-obsidian/audits/4" identifiers: - type: other value: "skillstore:zhanlincui-project-to-obsidian:audit:4" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
55
Architecture
100
Maintainability
87
Content
70
Community
87
Spec Compliance

What You Can Build

Onboard to an unfamiliar repository

Create a linked overview of structure, dependencies, entry points, and major modules.

Prepare architecture review notes

Generate architecture summaries, Mermaid diagrams, and module relationships for technical review.

Refresh project documentation

Build or update Obsidian notes for APIs, modules, quickstart steps, and configuration references.

Try These Prompts

Create a Quick Project Overview
/p2o ./my-project --quick and create a local folder. Ask before writing files.
Generate API Documentation
/p2o ./backend --api. Focus on routes, request parameters, response shapes, and linked API notes.
Build an Architecture Vault
/p2o ./platform --arch. Use Mermaid diagrams, module links, and a short decisions summary.
Create Full Obsidian Documentation
Convert ./monorepo into an Obsidian knowledge base. Exclude secrets, generated files, and dependencies. Output to my selected vault path.

Best Practices

  • Confirm the project path and output location before scanning or writing.
  • Exclude secret, dependency, build, and generated files from documentation.
  • Review generated notes before moving them from an AI inbox into shared vault sections.

Avoid

  • Do not point the skill at a home directory or broad filesystem root.
  • Do not publish generated configuration notes without checking for secrets.
  • Do not overwrite existing Obsidian notes without a review step.

Frequently Asked Questions

Does this write directly to Obsidian?
It can write through Obsidian MCP when available. It can also create a local folder or project docs directory after confirmation.
Which languages and frameworks are supported?
It recognizes JavaScript, TypeScript, Python, Go, Rust, Java, and common framework markers. Templates can adapt to other projects.
Does it execute project code?
It is intended to inspect files and structure, not run the application. Users should decline unexpected commands.
How should secrets be handled?
Exclude or redact environment files and secret configuration before generation. Review configuration notes before sharing them.
Can it update existing notes?
The workflow prefers append and patch operations in an AI inbox. Review changes before moving notes into shared vault sections.
Does it work with Claude, Codex, and Claude Code?
The skill declares support for Claude, Codex, and Claude Code. File and vault access depend on the active tool environment.

Developer Details

License

MIT

Author version

v1.4.0

Skillstore revision

r1

Ref

88a205c7f635a966e31156313b590d59007c5caa

Maintenance freshness

7/18/2026

Usage

67 downloads · 214 views

More from Claude Code

View all