obsidian-vault-builder — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited obsidian-vault-builder (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Patterns for operating an Obsidian vault from Claude Code: capture pipelines, plugin selection, REST API integration, file-portability discipline, methodology choice. Multi-vault aware.
For academic study vault construction (course prep, lecture notes, mock exams, exam-ready content): the durable patterns from the deprecated obsidian-study-vault-builder skill have been folded into this skill. See references/academic-vault.md. The companion skill itself was removed via PR #6 and re-validated 2026-05-15 (over-triggered on exam-prep prompts; structurally misaligned with the interactive-practice approach in the exam-prep protocol, itself ablated 2026-08-28).
references/academic-vault.md)When generating a vault from scratch or filling in many chapters/sections at once, never generate everything upfront. Use progressive validation:
references/qa-checklist.mdWhy this matters:
Approximate time budget for a typical academic course (10 chapters): chapter 1 ~30 min, review ~15 min, remaining ~90 min, QA ~30 min = ~2.5 hours vs 80+ hours manual. Pattern is greenfield-build universal; applies equally to paper/book/codebase-docs generation.
Many PKM users run more than one vault: a personal/manual vault (off-limits to agents) plus a Claude-native vault (default agent target). When the user has both, default writes target the Claude-native vault unless they explicitly extend access to the personal one.
Specific paths and override env vars belong in the user's CLAUDE.md, not in this skill, so the skill stays portable. For strong off-limits enforcement on the personal vault, consider a structural enforcement hook at the agent boundary that blocks Write/Edit/Bash mutations targeting paths under the personal vault.
Install only what's needed; soft cap ~10 active plugins. Core set:
Detailed plugin notes (Calendar/Periodic Notes status, Smart Connections multilingual swap, AI-layer plugin caveats): see references/plugins.md.
Five patterns, ordered by complexity:
obsidian.com CLI (index-aware)Per-pattern details + CLI mapping table + multi-vault notes: see references/interaction-patterns.md.
Mermaid is default for universal compatibility. When it hits a limit, the alternatives table covers Excalidraw, Draw.io, PlantUML, D2, Pikchr, WaveDrom, Kroki, TikZ, Python+Matplotlib. Tool selection factors: concept complexity, precision, platform priority, editability, time, dynamic-vs-static, version control.
Full table + decision tree + selection factors: see references/diagrams.md.
Files are file-portable by definition (markdown, txt, universal formats). Apps are transient tools; data is permanent. Use any Obsidian feature freely (wikilinks, transclusions, callouts, highlights, comments, Dataview/Bases queries).
Caveat: don't let a Dataview/Bases query be the only home of a fact. The query result is Obsidian-only; the underlying notes are portable.
| Pick | When | Free source |
|---|---|---|
| Evergreen Notes (Matuschak) | Knowledge work, 2+ year horizon | notes.andymatuschak.org |
| Zettelkasten (Doto) | Long-form output (books/papers) | writing.bobdoto.computer |
| LYT/Ideaverse (Milo) | Original synthesis with MOCs | linkingyourthinking.com |
| PARA (Forte) | Output-driven projects | fortelabs.com |
Obsidian Sync's 30-day version history is NOT backup. For real backup:
git init in vault root.gitignore for .obsidian/workspace*, .obsidian/cache*, .obsidian/plugins/*/data.json (plugin credentials), .smart-env/, .trash/Recurring issues when generating markdown for an Obsidian vault: Mermaid node-label syntax, LaTeX pipes in tables, wiki-link vs markdown-link conventions, collapsible callouts for active-learning content, universal-features discipline (mobile + future-proofing), structural-consistency patterns 5-8 (navigation/objectives/TOC/cross-refs), systematic fix approach (grep all -> fix all -> re-grep -> document), and minor unicode/table/HTML-tag pitfalls.
Full content + diagnose+fix recipes + universal-vs-platform feature table: see references/rendering-pitfalls.md.
.obsidian/plugins/*/data.json to git (often contains plaintext credentials)Two patterns are in active community use; neither has clear consensus as the "right" one:
<project>/assets/ for diagrams/images, <project>/code/ for samples. Relative paths (![[../assets/x.png]]) keep the project portable. Best for project-as-unit thinking and easy git submodule.attachments/ (or configured equivalent) at vault root, all paste-images go there. Best for cross-cutting reuse and simpler image-management.Pick based on portability needs (per-project wins) vs cross-vault reuse (flat wins). Avoid absolute paths in either pattern.
For vaults that grow, the standard PKM structure scales:
vault/
Projects/<project-name>/
notes/
assets/ # diagrams, images
code/ # example code
Resources/ # textbooks, papers, reference PDFs
Daily-Notes/
Templates/Tag by concept rather than by location (#async-patterns not #nodejs-folder). Properties for metadata (status, created, tags). Bases queries for dynamic overviews on top of the static folder structure.
For academic-study vault scaffolds (different shape, 00-overview / 01-chapter / cross-chapter / mock-exams): see references/academic-vault.md.
For detailed content beyond the summaries above:
v0.2.0 (2026-05-23 restructured per canonical agent-skills spec: <500 lines + companion docs in references/ subdirectory). Patterns are the result of a research arc with multi-wave agent verification, end-to-end mobile sync test, and Smart Connections empirical multilingual evaluation. NOT yet validated by an external full PKM build. Bump to v1.0 only after that lands.
The previously-separate obsidian-study-vault-builder skill (battle-tested across 37-file/828KB academic study vaults) was deprecated 2026-05-15 per PR #6 + post-compact re-validation. Its durable patterns are folded into this skill (references/academic-vault.md + references/qa-checklist.md + references/rendering-pitfalls.md § structural-consistency).
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.