Obsidian Tasknotes

• Analyzed: May 12, 2026, 3:13 AM
• Findings: 1
• Version: 0.1.0
• Hash: a9896ee0ab453ebf0b8d7551daf4d1758e5a51ee9e84ef474624f22dc73f46e4
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills skill bundle for Obsidian TaskNotes is benign. It is designed to interact with a local HTTP API running within Obsidian on `localhost` (default port 8080). The `SKILL.md` provides clear instructions for setup and usage, without any prompt injection attempts. The `scripts/tasks.py` script uses standard Python libraries (`requests`, `python-dotenv`), loads API credentials from a local `.env` file, and makes all network calls exclusively to `localhost`. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or obfuscation.