obsidian
Fail
Audited by Socket on Mar 7, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The skill's stated purpose (Obsidian vault/knowledge base management) is superficially aligned with a tool installation pathway, but the installation flow relies on an external, unverifiable binary (clawhub) and contains an internal contradiction about installation methodology. This creates potential supply-chain and trust concerns without clear, verifiable provenance. Overall classification: SUSPICIOUS due to unverifiable external installer and conflicting deployment notes, with no explicit benign credential or data access patterns to justify the external install path.
Confidence: 98%
Audit Metadata