Capture Concept writes Markdown files into a user-configured Obsidian vault. It is designed to avoid hidden network behavior and machine-specific assumptions.

The latest public version in this repository is supported.

Please open a private security advisory on GitHub if available, or contact the maintainer through GitHub with a short description of the issue.

Helpful details include:

• The affected script, skill, or installer path.
• The command you ran.
• Whether the issue can write outside the configured vault or skill directory.
• Any relevant OS and agent environment details.

The project should:

• Ask before installing into an agent skill directory.
• Refuse symlinked package content and generated caches during validation.
• Keep helper writes inside the configured Obsidian vault.
• Store config with private file permissions.
• Refuse symlinked config writes.
• Avoid bundling secrets, private vault paths, or environment files.
• Avoid silently installing external commands.

Run the public validation gate before publishing changes:

./scripts/validate.sh