obsidian-bases
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOW
Full Analysis
- [Indirect Prompt Injection] (LOW): The skill involves reading Obsidian notes to generate database configurations, which creates an inherent surface for indirect prompt injection.
- Ingestion points: Obsidian .md files via the Read tool.
- Boundary markers: None specified to differentiate note content from schema logic.
- Capability inventory: Read, Write, and Edit tools applied to vault files.
- Sanitization: No validation or sanitization rules provided for data interpolated from notes into Base configurations.
Audit Metadata