obsidian-plugin
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements project generation through
scripts/create-plugin.js, which collects user input for plugin metadata. This input is strictly validated using regex patterns to ensure the resulting project structure and manifest are secure and compliant with naming rules.\n- [SAFE]: The environment setup script (scripts/install.sh) and the project generator use standard package managers to install well-known development tools such as ESLint, TypeScript, and the official Obsidian API type definitions. No suspicious or unverified third-party dependencies were identified.\n- [SAFE]: The documentation inreferences/code-quality.mdprovides explicit security guidance, instructing developers to avoid dangerous patterns likeinnerHTMLandouterHTMLto prevent Cross-Site Scripting (XSS) vulnerabilities. It also recommends using Obsidian's internalrequestUrlfor safe network requests.
Audit Metadata