obsidian-sync

Pass

Audited by Gen Agent Trust Hub on Mar 21, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [SAFE]: The skill's primary functionality is limited to reading agent memory files from the local directory and copying them to a user-specified vault path. No malicious code patterns, obfuscation, or unauthorized access attempts were detected.\n- [EXTERNAL_DOWNLOADS]: The Python script includes an optional dependency on the PyYAML library to handle state configuration parsing. This is a well-established package for configuration management.\n- [COMMAND_EXECUTION]: The skill uses Python's standard pathlib and shutil libraries to create directories and copy memory files. These operations are performed safely using shutil.copy2 and Path.resolve() to handle local file paths provided by the user.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 21, 2026, 05:55 AM