obsidian-vault-manager
Audited by Socket on Mar 10, 2026
1 alert found:
Obfuscated FileThe Obsidian Vault Manager skill presents a coherent and proportionate footprint for its stated purpose of managing Obsidian vaults with wiki-links preservation. It relies on a well-known package registry (npm) for installation and uses a specialized CLI (obsidian-cli) to perform vault operations, reducing risk of breaking internal links. Data flows are local to the vault, with no credential handling or external exfiltration evident. The primary risk is dependency trust in the external obsidian-cli tool; as long as the user is comfortable with installing from npm and the CLI is maintained, the footprint remains aligned with the stated goal. Overall, the skill is benign with moderate risk due to the external dependency, and warrants routine review of the external tool’s trust and update practices.