obsidian-ops
Pass
Audited by Gen Agent Trust Hub on Feb 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill includes instructions for running standard development build and linting tools, such as
npm run build,npm run lint, andnpx grunt. These commands are triggered as part of the theme development lifecycle described in the build workflow documentation. - [EXTERNAL_DOWNLOADS]: It automates the synchronization of reference materials from official GitHub repositories under the
obsidianmdorganization (e.g.,obsidian-api,obsidian-sample-plugin) usinggit pull. These sources are recognized as well-known and trusted for the skill's specific domain. - [COMMAND_EXECUTION]: Provides workflows for generating commit messages and release notes by analyzing local repository states using
git status,git diff, andgit log. - [PROMPT_INJECTION]: The skill implements protective core rules that explicitly prevent the agent from performing automated git commits or pushes without direct user approval, mitigating risks of unauthorized code changes.
Audit Metadata