Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed Obsidian CLI helper that can read and modify local notes, with some scope and safety documentation gaps but no evidence of hidden, destructive, or exfiltrating behavior.
Install only if you want an agent to operate your local Obsidian vault through CLI commands. Review proposed create, append, prepend, property, and task-update actions before execution, especially for important notes or bulk changes, and avoid letting generic planning prompts trigger vault edits without an explicit Obsidian-related request.
The skill documents file-creating and file-modifying behavior without a clear warning that commands can alter or overwrite existing notes. In an exec-enabled environment, this raises the risk of unintended destructive changes to a user's knowledge base, especially if an agent acts autonomously on ambiguous prompts.
Lines L054-L057 explicitly state that plugin management, developer tools, and related advanced features are not supported in the free version. However, later troubleshooting and dependency text references network testing and broader operational behavior that goes beyond the narrowly documented local-only free feature set, creating contradictory guidance about what the skill is expected to do.
The "能力覆盖范围" lists a very long set of generic keywords and phrases such as "Agent", "Use", "需要项目管理", "任务规划", and "团队协作时使用", which overlap with common everyday requests rather than narrowly defining when this skill should activate. The file does not provide exclusion conditions or negative examples to distinguish Obsidian-specific use from general project-management or collaboration tasks.
The examples include append, prepend, property:set, property:remove, task toggle, and task done operations that directly modify existing notes, but no adjacent warning explains that these actions are state-changing and potentially irreversible. Because the skill exposes exec-based command usage, such examples can normalize unsafe autonomous edits without confirmation or preview safeguards.
The manifest and primary description frame this as a local Obsidian CLI skill, but later documentation broadens behavior into connectivity checks and network troubleshooting. That mismatch can mislead an agent into executing system/network commands the user did not intend, violating least surprise and least privilege.
The skill is presented as a local Obsidian vault CLI helper, but the error-handling guidance tells the agent to run ping/network-diagnostic commands unrelated to that purpose. Expanding from local file operations into host/network diagnostics increases operational scope and can cause unintended command execution on the user's system beyond expected note-management tasks.
The skill's display name and the entire user-facing documentation are presented in Chinese, and the usage guidance does not indicate that users may choose another language or locale. This can be a language/locale policy issue when a skill effectively forces a specific language without opt-in or explicit regional justification.
No suspicious patterns detected.
