obsidian

Fail

Audited by Socket on Mar 7, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill's stated purpose (Obsidian vault/knowledge base management) is superficially aligned with a tool installation pathway, but the installation flow relies on an external, unverifiable binary (clawhub) and contains an internal contradiction about installation methodology. This creates potential supply-chain and trust concerns without clear, verifiable provenance. Overall classification: SUSPICIOUS due to unverifiable external installer and conflicting deployment notes, with no explicit benign credential or data access patterns to justify the external install path.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 7, 2026, 05:45 PM
Package URL
pkg:socket/skills-sh/alphaonedev%2Fopenclaw-graph%2Fobsidian%2F@6cc382083cf30f8bd33acddbdff8b85216fac6e6