Obsidian Vault Linker

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:26 PM UTC
• Version:
  1.0.4

Overview

This skill is a disclosed Obsidian note-linking helper that reads vault notes and can make approved Markdown/YAML relationship edits.

Install only if you are comfortable letting an agent read the selected Obsidian vault and edit Markdown/YAML relationship metadata. Keep backups or version control, review findings before writes for normal use, and use autonomous mode only with clear limits on folders, note counts, and relationship types.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Context-Inappropriate Capability

Medium

• Confidence: 87% confidence
• Finding: The skill directs the agent to run local shell commands (`which obsidian`, `obsidian version`, and other CLI subcommands) against the host environment. Even though the commands are framed as note-discovery helpers, they expand the skill from passive file analysis into host command execution, which is a meaningful increase in attack surface and is not necessary to achieve the stated core function of reading and linking Markdown/YAML notes.

VirusTotal

65/65 vendors flagged this skill as clean.