Security audit

obsidian-curator

Security checks for vulnerabilities and agentic risk

Overview

The skill has a coherent Obsidian-vault purpose, but it under-discloses cloud AI data sharing and installs an unpinned npm executable that will access sensitive vault data.

Install only if you are comfortable giving this npm CLI plaintext read/write access to your LiveSync CouchDB vault. Use the local or none AI provider for sensitive vaults unless the documentation clearly states what note content is sent to cloud providers, and prefer a pinned, reviewed package version.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:8
Finding: Unpinned Third-Party npm Executable Creates a Supply-Chain Risk
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Warning

Location: SKILL.md:29
Finding: Cloud AI Features Contradict the Unconditional Local-Network Privacy Claim
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The skill prominently claims that data stays on the local network, but later documents OpenAI and Anthropic cloud providers without an equally explicit warning that note contents may be transmitted to third-party services for processing. In a note-management tool, users may process sensitive personal or organizational content, so this omission can mislead users about privacy boundaries and cause unintended external disclosure.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.