vault-setup

The code is primarily a local Obsidian vault initializer, but it persistently modifies ~/.claude/CLAUDE.md and embeds instruction-like text about global context injection. This creates a meaningful prompt-injection and supply-chain risk for users whose Claude tooling automatically loads these files. No network exfiltration, credential theft, destructive behavior, or conventional malware is evident. Review or remove the global configuration modification and the embedded instruction text before use.