Back to skill
Skillv1.0.0

VirusTotal security

git-backed-obsidian-cli-workflows · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

SuspiciousApr 29, 2026, 6:00 AM
Hash
2e2bfb9d81b55686e17de240a32b383c8e9f01dad61898a9d7c04cf8a133aa0f
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: git-backed-obsidian-cli-workflows Version: 1.0.0 The skill bundle implements automated Obsidian note management and Git synchronization, which involves high-risk capabilities such as shell execution and network access (git push). While these are aligned with the stated purpose, the use of 'git add -A' in scripts/backup.sh and the default vault path of /root/obsidian-vault pose a risk of unintended data exfiltration if the vault root is misconfigured. The design relies on environment variables to define critical execution paths and targets, which could be exploited if the agent's environment is not strictly controlled.
External report
View on VirusTotal