public — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited public (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Combines MCP server safety with Obsidian CLI context. One skill that routes each operation to the right backend.
npx skills add bitbonsai/mcpvaultEach operation maps to exactly one backend. The skill picks the right one automatically.
| Operation | MCP | Obsidian CLI | Git | Notes |
|---|---|---|---|---|
| Read note | yes | — | — | Safe, sandboxed read via MCP |
| Write / patch note | yes | — | — | Atomic writes with validation |
| Search vault | yes | — | — | BM25-ranked full-text search |
| Manage tags / frontmatter | yes | — | — | Safe YAML merge |
| List all tags with counts | yes | — | — | Filesystem scan, works headless |
| Move / rename files | yes | — | — | Path-confirmed moves |
| Get active file | — | yes | — | Currently focused file in Obsidian |
| Open note in Obsidian | — | yes | — | Open by path in editor |
| Daily notes | — | yes | — | Create/read/append with template expansion |
| Backlinks | — | yes | — | Incoming links to a note |
| Trigger plugin commands | — | yes | — | Workspace actions, plugin APIs |
| Sync vault across devices | — | — | yes | Plain git, no Obsidian Sync needed |
| Automated backup | — | — | yes | Cron / launchd, no UI needed |
The skill routes by intent:
git add -A -> git commit (if changes) -> git pull --rebase -> git push.git --version
git rev-parse --is-inside-work-tree
git config user.name
git config user.email
git remote -vIf any check fails, ask one targeted setup question with a recommended default.
User: Use git to store my vault and keep it synced.
Skill: I will run a git preflight first (git, repo, identity, remote), then set up anything missing with one targeted question.
Skill: Preflight OK. Running sync: git add -A -> git commit (if changes) -> git pull --rebase -> git push.
Skill: Done. Vault synced to origin/main. No force push used.MCP Server — Handles all file I/O: reading, writing, searching, patching, and organizing notes. Enforces path sandboxing, validates inputs, and performs atomic operations. The safe default for any vault mutation.
Obsidian CLI — Bridges the gap for operations that need the running desktop app: opening notes in the editor, triggering plugin commands, exporting to PDF via Obsidian URI schemes.
Git Sync — Plain git for vault syncing across devices. No Obsidian Sync subscription required. Works headlessly via cron, launchd, or CI — no app needs to be running.
An Obsidian vault is just a folder of markdown files. You can git init inside it, add a remote, and push/pull like any repo. No proprietary format, no paid service.
# cron job or launchd plist
cd /path/to/vault
git add -A
git commit -m "backup $(date +%Y-%m-%d)"
git pushNo Obsidian CLI required. Works on servers, NAS, or any headless machine.
The Obsidian Git community plugin (8k+ stars) adds GUI-driven auto-sync from within the app: auto-commit on interval, pull on startup, push on close, and a source control sidebar.
.gitignore or Git LFS.obsidian/workspace.json to .gitignoreRecommended .gitignore:
.obsidian/workspace.json
.obsidian/workspace-mobile.json
.obsidian/plugins/obsidian-git/data.json
.trash/Trigger phrases:
Not a fit for:
Chain MCP reads into app actions. Search for a note via MCP, then open it in Obsidian for visual editing.
Steps: search_notes → read_note → open in Obsidian
The skill picks the right backend automatically. File operations route through MCP; app-context actions use Obsidian URI schemes.
Steps: Analyze user intent → Route to MCP or App → Execute with safety checks
Write a draft via MCP, review in Obsidian, then patch corrections back through MCP.
Steps: write_note → review in editor → patch_note
Skill folder structure:
.claude/
skills/
obsidian/
SKILL.md # Gotchas, error recovery, index
resources/
tool-patterns.md # Per-tool response shapes and recipes
obsidian-conventions.md # Vault structure, wikilinks, tags
git-sync.md # Git backup/sync workflowsSKILL.md frontmatter:
---
name: obsidian
description: >
Activate when the user mentions their
Obsidian vault, notes, tags, frontmatter,
daily notes, backup, or sync. Route
operations across MCP, Obsidian CLI/app
actions, and git sync with safe defaults.
metadata:
version: "2.0"
author: bitbonsai
---~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.