Obsidian Wiki

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed Obsidian-vault wiki maintenance tool whose local file access is broad but scoped to its stated purpose.

Install only for vaults where you want an agent to maintain a compiled wiki. Review the resolved vault path before approving writes, keep backups or Git history for the vault, and be aware that --fix workflows and AGENTS.md updates can change local wiki content and future agent behavior within that vault.

SkillSpector

By NVIDIA

Vulnerability Patterns

MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Lp3

Medium

Category: MCP Least Privilege
Confidence: 91% confidence
Finding: The skill explicitly instructs the agent to read from and write to an Obsidian vault, including creating and updating files under wiki/, _meta/, .wiki-meta/, and AGENTS.md, but it declares no permissions. This creates a governance and safety gap: the skill can materially modify local user data while providing no machine-readable permission boundary, increasing the risk of unintended or unreviewed file access and writes.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal