skills/malue-ai/dazee-small/obsidian/Gen Agent Trust Hub

obsidian

Pass

Audited by Gen Agent Trust Hub on Mar 28, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of obsidian-cli from the yakitrak/yakitrak/obsidian-cli Homebrew tap.
  • [DATA_EXFILTRATION]: The skill accesses the Obsidian application's configuration at ~/Library/Application Support/obsidian/obsidian.json to determine the location of user vaults on the disk.
  • [PROMPT_INJECTION]: The skill reads and searches content within user-controlled Markdown notes, which could contain malicious instructions.
  • Ingestion points: Notes are accessed using obsidian-cli search-content and by reading *.md files as documented in SKILL.md.
  • Boundary markers: There are no instructions or delimiters provided to ensure the agent ignores commands embedded within notes.
  • Capability inventory: The skill possesses the ability to create, move, delete, and search notes, as well as perform direct file modifications.
  • Sanitization: No sanitization or validation of note content is performed before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 28, 2026, 02:08 AM