obsidian-plugin

Pass

Audited by Gen Agent Trust Hub on Mar 29, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements project generation through scripts/create-plugin.js, which collects user input for plugin metadata. This input is strictly validated using regex patterns to ensure the resulting project structure and manifest are secure and compliant with naming rules.\n- [SAFE]: The environment setup script (scripts/install.sh) and the project generator use standard package managers to install well-known development tools such as ESLint, TypeScript, and the official Obsidian API type definitions. No suspicious or unverified third-party dependencies were identified.\n- [SAFE]: The documentation in references/code-quality.md provides explicit security guidance, instructing developers to avoid dangerous patterns like innerHTML and outerHTML to prevent Cross-Site Scripting (XSS) vulnerabilities. It also recommends using Obsidian's internal requestUrl for safe network requests.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 29, 2026, 02:29 AM