obsidian-rest-api

• Analyzed: May 11, 2026, 11:01 AM
• Findings: 1
• Version: 1.0.1
• Hash: 8e874715e7b51b360ead6e895a8e7b7ecae494cc293177cd2fb34583ae91afb6
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill facilitates interaction between an AI agent in a WSL/remote environment and the Obsidian Local REST API on a Windows host. It includes automated setup logic in SKILL.md to detect the host IP via /etc/resolv.conf and stores API credentials in a local workspace file (TOOLS.md). While it utilizes insecure curl flags (-k) to accommodate the plugin's default self-signed certificates, the behavior is transparent, well-documented in references/api.md, and strictly aligned with the stated purpose without any signs of malicious intent or data exfiltration.