Security audit
Security checks across malware telemetry and agentic risk
This appears to be a real Obsidian search integration, but it asks users to run unpinned remote installers and gives assistants broad read/write access to private vault content.
Install only if you are comfortable letting an MCP server and connected assistant search, read, append to, and overwrite files in the selected Obsidian vault. Review and pin the upstream installer before running it, avoid force-installing solely because the skill says to, back up your vault, restrict vault paths to notes you are willing to expose, and use fully local mode unless you trust the remote Ollama host.
### Prerequisites - **Docker Desktop** (running) - **uv** (Python package manager): `curl -LsSf https://astral.sh/uv/install.sh | sh` - **An Obsidian vault** on your local filesystem ### One-Liner Install
62/62 vendors flagged this skill as clean.
No suspicious patterns detected.
