obsidian-ref
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous shell commands for environment setup and project management, including
npm install,npm run build, andnpx grunt build. It also includes specific instructions for repository management usinggit clone,git fetch, andgit logto track updates in reference materials. - [COMMAND_EXECUTION]: Detailed instructions are provided for creating directory junctions and symbolic links using
cmd /c mklink /Jon Windows andln -son macOS/Linux to manage a local reference library. - [EXTERNAL_DOWNLOADS]: The skill guides the agent to download development dependencies from the npm registry and to clone multiple official repositories from the Obsidian GitHub organization (
obsidianmd). - [REMOTE_CODE_EXECUTION]: Setup workflows involve running scripts such as
setup-stylelint.mjsandsetup-ref-links.shwhich are common in development environments for automating configuration and build processes. - [DATA_EXFILTRATION]: The architecture utilizes symlinks to access documentation outside the immediate project root. While legitimate for cross-project references, this creates a potential surface for unintended file access if the agent is directed to follow links to sensitive areas of the file system.
- [PROMPT_INJECTION]: The skill contains explicit instructions to override or guide the agent's behavior, such as designating
obsidian.d.tsas the authoritative source for API details and providing specific procedures for how the agent should search for and update reference materials.
Audit Metadata