obsidian-vault-crud

Fail

Audited by Socket on Mar 9, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill coherently implements a local, file-based CRUD layer for Obsidian vault notes with explicit atomic write semantics, advisory locking, and frontmatter preservation via ruamel.yaml. There are no credentials, external network calls, or data exfiltration pathways. The security footprint is appropriate for a developer tool that operates on local vault data; the advisory lock design is standard for lightweight synchronization but does not enforce strict mutual exclusion across all environments. Overall, it is Benign with Low security risk, given the stated purpose and execution model.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 9, 2026, 06:51 PM
Package URL
pkg:socket/skills-sh/richfrem%2Fagent-plugins-skills%2Fobsidian-vault-crud%2F@0463255763bb8ed3f5f3103d752b76d4d9c22f2d