obsidian-mobile-sync — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited obsidian-mobile-sync (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Setup mobile access to Obsidian vault via GitHub sync (free) or Obsidian Sync (paid).
"Obsidian doesn't need login" — WRONG for mobile sync.
Always clarify sync requirements when user asks about mobile access.
ALWAYS present free options FIRST. Users expect cost-free solutions by default.
Cost: $0 (100% free) Setup: Push to GitHub → Install Obsidian Git plugin (desktop) Mobile:
Pros: Free, version control, forever history, no vendor lock-in Cons: Manual sync on mobile (2-3 taps per session)
iOS Free Alternative: iSH app + Git CLI (100% free, no purchase needed)
Cost: $10/month or $96/year Setup: Create account → Subscribe → Enable sync Mobile: Install app → Sign in → Select vault Pros: Auto-sync, conflict resolution, E2E encrypted, zero manual work Cons: Paid subscription ($120/year)
When to recommend: User explicitly values convenience over cost, or has budget for premium tools.
Install:
curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg | sudo dd of=/usr/share/keyrings/githubcli-archive-keyring.gpg
echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" | sudo tee /etc/apt/sources.list.d/github-cli.list
sudo apt update && sudo apt install gh -yLogin:
gh auth login
# Select: GitHub.com → HTTPS → Yes → Login with browserScope Management: gh auth login grants basic scopes (repo, workflow, read:org). If you need to delete repos later, add delete_repo scope:
gh auth refresh -h github.com -s delete_repoThis prevents "HTTP 403: needs delete_repo scope" errors when running gh repo delete.
Create repo + push (one command):
cd ~/Documents/Obsidian\ Vault
gh repo create obsidian-vault --private --source=. --remote=origin --pushInstall: Settings → Community plugins → Browse → "Obsidian Git"
Configure:
vault backup: {{date}}Result: Zero manual work on desktop.
https://github.com/USERNAME/obsidian-vault.git/storage/emulated/0/Obsidian/vaultSync: Pull before edit, Commit + Push after edit
100% free, no purchase needed.
apk add git
cd ~
git clone https://USERNAME:[email protected]/USERNAME/obsidian-vault.gitSync workflow:
# Pull (before edit)
cd ~/obsidian-vault && git pull
# Push (after edit)
cd ~/obsidian-vault
git add .
git commit -m "Update from iOS"
git pushPros: Free, full Git functionality Cons: Terminal-based (not GUI)
Free for pull, $19.99 one-time for push to private repos.
Sync: Pull before edit, Commit + Push after edit (requires Pro)
Store pointers in Mnemosyne, not full content:
# Good: Store pointer
mnemosyne_remember(
content="VPS cleanup: [[VPS Cleanup]]",
importance=0.7,
source="reference"
)
# Bad: Store full content
mnemosyne_remember(
content="VPS cleanup steps: 1. df -h, 2. apt clean...",
importance=0.7,
source="reference"
)Strategy:
Workflow:
read_file(path="~/Documents/Obsidian Vault/Note Name.md")See references/mnemosyne-integration-examples.md for real workflow examples.
Complete setup workflow: Full Mnemosyne + Obsidian + GitHub integration takes ~30 minutes. Components: Obsidian (Snap), obsidian-skills (5 skills), GitHub CLI, Git, Mnemosyne. Result: 40% Mnemosyne (fast recall, pointers) + 60% Obsidian (rich content, Bases, Canvas) + GitHub backup. Production ready, zero maintenance, permanent.
GitHub token for autonomous operations: See references/github-token-permanent-access.md for permanent token setup (enables autonomous repo operations without repeated auth prompts).
#!/bin/bash
# Save as ~/setup_obsidian_github.sh
set -e
gh auth status || { echo "Run: gh auth login"; exit 1; }
USERNAME=$(gh api user -q .login)
cd ~/Documents/Obsidian\ Vault
git remote remove origin 2>/dev/null || true
gh repo create obsidian-vault \
--private \
--source=. \
--remote=origin \
--push \
--description="Obsidian vault with Mnemosyne integration"
echo "✅ Repo: https://github.com/$USERNAME/obsidian-vault"Run: chmod +x ~/setup_obsidian_github.sh && ~/setup_obsidian_github.sh
If merge conflict:
<<<<<<< HEAD
Your changes
=======
Remote changes
>>>>>>> origin/masterRecommending paid solutions first — Users expect free options by default. Always present Git sync (free) before Obsidian Sync (paid). Only recommend paid when user explicitly values convenience or has budget.
iOS: Recommending Working Copy without mentioning cost — Working Copy is free for pull but requires $19.99 Pro for push to private repos. User frustration signal: "Bayar anjir working copy untuk push, ngapa lo saranin ini lol" — Always present iSH + Git (100% free) as primary option, Working Copy as secondary paid alternative.
Using GitHub password — Deprecated. Use Personal Access Token (https://github.com/settings/tokens/new with repo scope).
Not pulling before editing — Always pull first on mobile to avoid conflicts.
Storing full content in Mnemosyne — Wastes memory. Store wikilink pointers instead.
Claiming no login needed — True for desktop-only, false for mobile sync.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.