config-obsidian

Fail

Audited by Socket on Mar 7, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill aims to configure Obsidian sync via two trigger modalities and to record configuration in CLAUDE.md. Its data flows involve user-provided repository and vault details, an optional API key, local trigger commands, and writing configuration to a local file. This is coherent with a legitimate developer tooling helper. Minor security cautions include cautious handling of the REST API key to avoid leakage in logs or shared files, and ensuring the generated CLAUDE.md does not inadvertently reveal sensitive values. Overall, the footprint is benign and proportionate to the stated purpose, with moderate security considerations focused on credential handling and local network usage.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 7, 2026, 04:54 PM
Package URL
pkg:socket/skills-sh/wangjs-jacky%2Fjacky-skills%2Fconfig-obsidian%2F@8904ef8dc9318ccc41322ab28700150b06af963e