ClawHub
Back to skill

Security audit

Obsidian笔记CLI

Security checks across malware telemetry and agentic risk

Overview

This local Obsidian note tool is not malicious, but it can rewrite many private notes at once without preview, confirmation, backup, or rollback safeguards.

Review before installing if your Obsidian vault contains important or private notes. Prefer read-only commands such as search, stats, and check-links first; back up the vault and require explicit user approval before running replace or any broad write operation.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
89% confidence
Finding
The skill explicitly describes direct operations on a local Obsidian vault, including search, export, and bulk replacement, which imply file read and file write access. Having these capabilities without declared permissions weakens transparency and safety review, because users and the platform cannot clearly evaluate or constrain filesystem access before use.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill documents bulk replacement, tag changes, export, and cleanup of local notes, including deletion-oriented cleanup, but gives no warning about irreversible changes, backup guidance, dry-run mode, or confirmation requirements. In a local knowledge base context, this can lead to large-scale accidental data loss or corruption across many files with a single command.

Missing User Warnings

Medium
Confidence
84% confidence
Finding
The replace command performs bulk in-place modification across an entire local vault with no dry-run, confirmation, backup, or rollback support. In the context of a tool that directly operates on a user's knowledge base, a mistaken pattern or unexpected regex behavior can irreversibly corrupt large amounts of data, especially since replacement input is treated as regex-driven text transformation.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.