obsidian-ref

Pass

Audited by Gen Agent Trust Hub on Apr 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides numerous shell commands for environment setup and project management, including npm install, npm run build, and npx grunt build. It also includes specific instructions for repository management using git clone, git fetch, and git log to track updates in reference materials.
  • [COMMAND_EXECUTION]: Detailed instructions are provided for creating directory junctions and symbolic links using cmd /c mklink /J on Windows and ln -s on macOS/Linux to manage a local reference library.
  • [EXTERNAL_DOWNLOADS]: The skill guides the agent to download development dependencies from the npm registry and to clone multiple official repositories from the Obsidian GitHub organization (obsidianmd).
  • [REMOTE_CODE_EXECUTION]: Setup workflows involve running scripts such as setup-stylelint.mjs and setup-ref-links.sh which are common in development environments for automating configuration and build processes.
  • [DATA_EXFILTRATION]: The architecture utilizes symlinks to access documentation outside the immediate project root. While legitimate for cross-project references, this creates a potential surface for unintended file access if the agent is directed to follow links to sensitive areas of the file system.
  • [PROMPT_INJECTION]: The skill contains explicit instructions to override or guide the agent's behavior, such as designating obsidian.d.ts as the authoritative source for API details and providing specific procedures for how the agent should search for and update reference materials.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 16, 2026, 02:49 PM