headless-vault-cli
Read and edit Markdown notes on your personal computer via SSH tunnel. Use when the user asks to read, create, or append to notes in their vault.
Why use this skill?
Securely read, create, and append to your local Markdown notes from a remote OpenClaw agent using the headless-vault-cli via reverse SSH.
Install via CLI (Recommended)
clawhub install openclaw/skills/skills/logancyang/headless-vault-cliWhat This Skill Does
The headless-vault-cli skill enables your OpenClaw agent to interact directly with your personal Markdown note repository (such as an Obsidian or Logseq vault) from a remote VPS. By establishing a secure reverse SSH tunnel, the skill allows you to bridge the gap between your remote agent's processing power and your locally stored knowledge base. It facilitates a secure, non-destructive interface for reading, creating, and appending notes, ensuring your data remains on your local machine while remaining accessible to your agent workflows.
Installation
To install this skill, run the following command in your terminal: clawhub install openclaw/skills/skills/logancyang/headless-vault-cli. After installation, you must configure your local machine by installing the vaultctl utility, adding the SSH forced-command entry to your ~/.ssh/authorized_keys to restrict access to the binary, and initiating a reverse SSH tunnel. Finally, ensure the VAULT_SSH_USER environment variable is correctly set in your VPS environment to enable the connection.
Use Cases
This skill is perfect for users who keep a local "second brain" and want to automate note-taking or querying. Use it when you need to quickly jot down meeting notes, log task completions in a daily file, or query existing documentation stored in your vault without manually navigating your file system. It is ideal for developers, writers, and knowledge workers who operate in both local and cloud environments.
Example Prompts
- "Create a new note titled 'Project Alpha Planning' and add an initial checklist for the migration phase."
- "Find my note on 'AI ethics' and read the section about regulatory compliance."
- "Append a new entry to today's daily log: 'Completed review of the headless-vault documentation'."
Tips & Limitations
For security, this skill is strictly non-destructive. You cannot delete, rename, or move files, and the vaultctl tool automatically prevents path traversal outside your designated vault directory. Always use the -4 flag for SSH connections to prevent IPv6 latency issues. Remember that this tool requires your local machine to be online and the SSH tunnel to be active; if the tunnel drops, the agent will lose connection to your files.
Metadata
Not sure this is the right skill?
Describe what you want to build — we'll match you to the best skill from 16,000+ options.
Find the right skillPaste this into your clawhub.json to enable this plugin.
{
"plugins": {
"official-logancyang-headless-vault-cli": {
"enabled": true,
"auto_update": true
}
}
}Tags(AI)
Flags: file-write, file-read, network-access