defuddle

1# Defuddle
2 
3Treat Defuddle as an optional external extractor. This package supports inert
4URL plans and filesystem capture; it does not ship an enforcing network cleaner.
5Cleaning, raw capture, and wiki ingestion are separate operations.
6 
7Resolve the installed product root from this skill's own location, never from
8the selected vault or process working directory:
9 
10```bash
11PRODUCT_ROOT=/absolute/path/to/installed/claude-obsidian
12CORE="$PRODUCT_ROOT/scripts/claude-obsidian.py"
13test -f "$CORE"
14```
15 
16Every `../wiki/references/` link in this file resolves the same way, relative
17to this skill's own directory under `$PRODUCT_ROOT`, never relative to the
18selected vault's `wiki/` directory.
19Upstream flags may be checked in a separately installed `kepano/obsidian-skills`
20reference, but do not override this package's privacy and transaction boundary.
21 
22## Inert URL plan
23 
24Accept HTTPS URLs only. Reject credentials, fragments, controls, sensitive query
25parameters, and non-public hosts or IP addresses. Never interpolate a URL into a
26shell string. Use one argv element when constructing a plan:
27 
28```bash
29python3 "$CORE" capture external-plan url "HTTPS_URL"
30python3 "$CORE" contracts --verify --capability defuddle --vault "$VAULT"
31```
32 
33The plan executes no network request. Report the normalized host, required
34network egress, redirect policy, optional dependency, and `execute: false`.
35An `available` state means no executable was found. A `configured` state means
36…