Security audit
Security checks for vulnerabilities and agentic risk
This skill is a plain Markdown guide for using obsidian-cli with Obsidian vaults, with expected note-management powers but a delete command users should handle carefully.
Before installing, be aware that this skill can guide an agent to read, search, edit, move, and delete notes in an Obsidian vault through obsidian-cli. Confirm the active vault and exact note path before any move or delete operation, especially if the vault contains work, personal, or sensitive notes.
The listed trigger keywords include generic terms such as "plain" and "obsidian," plus an ambiguous version string "1.0.0," without any constraints or negative examples. In a manifest/markdown context, these broad terms could cause unintended activation because they are not narrowly scoped to a specific action or command.
The skill explicitly documents a destructive delete capability (obsidian-cli delete "path/note") without any warning, confirmation guidance, backup advice, or scope restriction. In an agent context with exec capability, this increases the chance that a user request, ambiguous instruction, or downstream prompt manipulation could cause irreversible note deletion.
A substantial portion of the skill description is presented in Chinese, while the rest of the file is in English, and there is no indication that the user can choose their preferred language. This can amount to a language-policy issue when a skill imposes a locale or language without opt-in.
No suspicious patterns detected.
