Security audit
Security checks for vulnerabilities and agentic risk
This Obsidian helper is a coherent Markdown-only skill for managing a local note vault, with expected file access risks that users should control carefully.
Install only if you want an agent to help manage a specific Obsidian vault. Set the vault path deliberately, keep backups or version control for notes, and require confirmation before creating, overwriting, exporting, or bulk-scanning vault content.
The activation keywords are extremely broad (e.g., 'Obsidian', '笔记', '知识库'), making accidental invocation during normal conversation likely. Because this skill performs direct local file reads and writes in the user's vault, unintended activation could lead to unauthorized note creation, modification, or disclosure without clear user intent.
The visible description and all user-facing instructional text are written exclusively in Chinese, indicating a fixed language assumption. There is no statement that the skill supports multiple languages or that Chinese output is optional or region-specific.
The skill description does not clearly warn users that it directly reads from and writes to local Markdown files in the Obsidian vault. This weakens informed consent and increases the chance that a user invokes the skill without understanding that local data may be exposed, modified, or overwritten.
No suspicious patterns detected.
