Security audit

Obsidian Litiao

Security checks for vulnerabilities and agentic risk

Overview

This skill is a small Obsidian helper whose file access and note changes match its stated purpose, with some install and deletion-risk cautions users should understand.

Before installing, confirm you trust the obsidian-cli Homebrew tap and understand that the skill can search, edit, move, and delete notes in the selected Obsidian vault. Ask the agent to confirm the vault and note path before delete, rename, or bulk changes, and keep backups for important vaults.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:5
Finding: Unpinned Executable Dependency from a Third-Party Homebrew Tap
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The skill explicitly documents create, move, and delete operations against a user's Obsidian vault without any warning that these commands modify or permanently remove user data. In a note-management skill this functionality is expected, but the lack of safety guidance increases the risk of accidental destructive actions, especially because moves can rewrite links across the vault and deletes target user content directly.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.