Security audit
Security checks for vulnerabilities and agentic risk
The skill is mostly a setup guide, but its helper script can copy an Obsidian vault to iCloud despite the guide advertising a no-iCloud peer-to-peer sync model.
Review the iCloud rsync helper carefully before using this skill. The Syncthing setup itself is coherent, but the large-file filtering script may place your notes in iCloud and can change destination data; use backups, verify paths, and prefer Syncthing ignore rules or a dry run before copying a live vault.
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
## Step 3: Smart Large-File Filtering
### 3.1 Create the Exclusion Script
Create a sync script on Mac that automatically excludes large files:
The skill instructs users to run a filesystem synchronization script that writes to another path and deletes a temporary file, but provides no safety guidance such as testing on a backup, validating source/destination paths, or using a dry run. In a note-vault context, mistakes can cause data propagation, overwrite, privacy exposure, or difficult-to-detect sync inconsistencies.
The script claims to 'sync Obsidian Vault with smart large-file exclusion,' but the configured destination is '~/iCloud/Obsidian Vault', not the iPhone/Syncthing path described elsewhere. This deceptive or inaccurate behavior can mislead users into executing a data-transfer workflow with different trust boundaries than advertised.
The documented 'Syncthing-based' solution embeds a separate rsync workflow that copies the vault to an iCloud destination, which materially differs from the stated architecture. This mismatch can cause users to sync sensitive notes to Apple cloud storage unintentionally, undermining the claimed privacy, peer-to-peer, and offline-first properties.
The skill emphasizes P2P, end-to-end encryption, and offline-first behavior, but it does not clearly warn that enabling Syncthing connectivity or remote discovery still transmits vault contents and metadata over the network. Users handling sensitive notes may wrongly infer that the setup is effectively local-only by default, leading to unintentional exposure beyond the device.
The provided rsync command writes directly into the destination vault with '--update', but the instructions do not clearly warn that it modifies destination data and can still produce unintended state changes, stale-file retention, or partial one-way overwrites. In a note vault containing user content, this can lead to silent data integrity problems, confusion during recovery, and accidental propagation of sensitive or outdated files.
The skill presents a Syncthing-based Mac↔iPhone workflow but then introduces a separate rsync script that targets an iCloud Drive path, materially changing the trust boundary and data flow. This mismatch can cause users to sync sensitive vault contents to a third-party cloud location they did not expect, undermining the stated offline-first and P2P-only architecture.
The script docstring says it syncs to 'iCloud/Möbius', but the destination is hard-coded to an iCloud Drive directory under '~/Library/Mobile Documents/...'. That discrepancy is dangerous because users may believe they are following the documented iPhone local-folder/Syncthing model while actually copying vault data into iCloud, exposing contents and metadata to a different storage provider and sync mechanism.
The document is written primarily in Chinese and presents the Chinese tutorial as the default path, with English only offered as an alternate link. This can violate a language/locale policy when users are not first offered a language choice or clear opt-in before the content defaults to one language.
Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.
The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.
The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
No suspicious patterns detected.