obsidian-ops

Pass

Audited by Gen Agent Trust Hub on Feb 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes instructions for running standard development build and linting tools, such as npm run build, npm run lint, and npx grunt. These commands are triggered as part of the theme development lifecycle described in the build workflow documentation.
  • [EXTERNAL_DOWNLOADS]: It automates the synchronization of reference materials from official GitHub repositories under the obsidianmd organization (e.g., obsidian-api, obsidian-sample-plugin) using git pull. These sources are recognized as well-known and trusted for the skill's specific domain.
  • [COMMAND_EXECUTION]: Provides workflows for generating commit messages and release notes by analyzing local repository states using git status, git diff, and git log.
  • [PROMPT_INJECTION]: The skill implements protective core rules that explicitly prevent the agent from performing automated git commits or pushes without direct user approval, mitigating risks of unauthorized code changes.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 23, 2026, 07:00 PM