doc-obsidian
Audited by Socket on Mar 11, 2026
1 alert found:
Obfuscated FileOverall, the skill appears to have coherent purpose-capability alignment: it manages an Obsidian-like vault via CLI tools and supports AI memory workflows with local file operations. The primary security concerns relate to potential outbound data in the embedding step and the autonomy of memory management for AI agents. No credential exposure or untrusted downloads are evident from the documentation. The risk is currently low to moderate (securityRisk ~0.25) with a minor potential for data leakage via embeddings if configured to use external services. Proportionality is maintained for vault management tasks; no excessive permissions or credential requirements are introduced. Recommend monitoring embedding behavior and ensuring embedding calls are confined to trusted/local processing when used in critical environments.