note-to-blog
Audited by Socket on Feb 16, 2026
1 alert found:
Anomaly[Skill Scanner] Skill instructions include directives to hide actions from user Overall, the description outlines a solid, machine-assisted workflow for converting Obsidian notes into draft blog posts with appropriate tracking and frontmatter. The main concerns are privacy of session data and timestamp handling, plus ensuring unrecognized Obsidian syntax is flagged for manual review. If implemented with proper consent, scoped access, and predictable timestamp semantics, the approach is sound for supply-chain-friendly content automation. LLM verification: This SKILL.md describes a plausible and coherent tool for selecting and converting Obsidian notes to blog drafts. The main security concern is privacy and scope: the skill reads local chat history (~/.claude/history.jsonl) and session indexes plus note files and sends candidate content and session keywords to an LLM for scoring and summary generation without documenting the destination, retention, or consent. That flow can leak sensitive information (private notes or prompts) to third parties. T