obsidian-bases — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited obsidian-bases (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this as a compact workflow and fallback syntax reference. Prefer a separately installed kepano/obsidian-skills obsidian-bases skill, then the current official Bases syntax, for detailed or version-sensitive fields and functions.
Answer design and syntax questions read-only. For a requested .base edit, resolve the user vault and use one inspected transaction; never write the file directly.
Resolve the installed product root from this skill's own location, not from the vault or current working directory:
PRODUCT_ROOT=/absolute/path/to/installed/claude-obsidian
CORE="$PRODUCT_ROOT/scripts/claude-obsidian.py"
test -f "$CORE"Every ../wiki/references/ link in this file resolves the same way, relative to this skill's own directory under $PRODUCT_ROOT, never relative to the selected vault's wiki/ directory.
.base file.supported by the user's Obsidian version or installed plugins.
null handling.
operation-transactions.md, keep the .base file under wiki/, and build one claude-obsidian.transaction.v1 bundle with operation_type: base. Inspect it, then set APPROVAL_SHA256 to the returned approval_sha256 only after review and apply once:
python3 "$CORE" transaction inspect "$BUNDLE" --vault "$VAULT"
python3 "$CORE" transaction apply "$BUNDLE" --vault "$VAULT" \
--approved-plan-sha256 "$APPROVAL_SHA256"the conformance procedure when application behavior cannot be verified locally. Never label unobserved output as tested.
Checked 2026-10-17 against official view documentation. Table and cards require 1.9+, list requires 1.10+, and native kanban requires 1.14+. Map requires the Maps plugin. These are documented minimum versions, not versions exercised by this package's offline tests. On an older app, keep an ordinary table fallback. Preserve unknown existing view fields.
.base files are YAML. Common top-level keys are filters, formulas, properties, summaries, and views.
filters:
and:
- file.inFolder("wiki")
- 'status != "archived"'
formulas:
status_label: 'if(status == "mature", "Ready", "Review")'
properties:
status:
displayName: "Status"
views:
- type: table
name: "Wiki pages"
order:
- file.name
- type
- status
- updated
- formula.status_labelGlobal filters apply to every view. A view may also define its own filters. Recursive filter objects use one of and, or, or not at each level.
filters:
or:
- file.hasTag("concept")
- and:
- file.hasTag("source")
- 'status == "active"'Use note properties by name, file metadata as file.name, file.path, file.folder, file.ext, file.ctime, file.mtime, or file.tags, and computed properties as formula.<name>.
if().examples in the date section below as unverified compatibility candidates, and test the user's supported app versions before relying on the output.
formula.<name> before referencing it in a view or propertydisplay configuration.
from or where into a Base.that the resulting column will be empty.
The Help syntax checked 2026-10-17 still describes date differences in milliseconds. The official 1.9.3 changelog describes a Duration, and the pinned upstream skill also uses a Duration field. The recorded excerpts of the API types at the reviewed commit do not include a Duration definition, so they are not cited for either reading. No native app observation in this update resolves that disagreement.
These retained millisecond expressions are candidates for an isolated test, not a compatibility guarantee:
formulas:
age_days: '((now() - file.ctime) / 86400000).round(0)'
days_until: 'if(due_date, ((date(due_date) - today()) / 86400000).round(0), "")'Compare direct subtraction/division, the Duration day field, and explicit number(date) subtraction using one-day, multi-month, negative, and missing values. Record app version, timezone, expression, actual value/type, and errors using native-conformance.md. Do not rewrite existing formulas or assert that any candidate is correct before that check.
Cards and list examples:
views:
- type: cards
name: "Reading list"
order:
- file.name
- author
- status
- type: list
name: "Quick list"
order:
- file.name
- statusFor Obsidian 1.14+, group a kanban by an existing writable note property:
filters:
and:
- file.inFolder("wiki")
- 'file.ext == "md"'
views:
- type: kanban
name: "Page status"
groupBy:
property: note.status
direction: ASC
groupOrder:
- seed
- developing
- mature
- evergreen
- null
order:
- file.name
- statusgroupOrder lists visible groups in display order. An absent groupOrder shows all groups using the groupBy sort; an empty list hides every group. null includes pages without the grouped value. Adding an empty group does not create a note. Native card moves can change a note property, and grouping by file.folder can move files; agents must still use reviewed transactions for vault mutations. A formula or other read-only file property is unsuitable for an editable status board. See Kanban view.
Embed a Base or one named view in a Markdown note:
![[Dashboard.base]]
![[Dashboard.base#Wiki pages]]After an applied edit, report the operation ID, exact changed path, validation performed, and anything that still requires rendering in Obsidian. Do not commit Git.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.