Security audit
Security checks for vulnerabilities and agentic risk
This is a Chinese Obsidian beginner guide with some broad and imperfect setup guidance, but no hidden payload, exfiltration, persistence, or purpose-mismatched behavior was found.
Install only if you are comfortable with a Chinese-language Obsidian onboarding guide. Prefer the AppImage or official installer when possible, review any sudo or package-manager command before running it, and avoid putting sensitive vaults in cloud-synced folders unless you understand the privacy, retention, and sharing implications.
The skill recommends storing the vault in cloud-synced directories such as iCloud or OneDrive without explaining privacy, retention, sharing, or corporate-policy implications. Users may place sensitive notes into third-party synced storage by default, increasing exposure risk if accounts, devices, or sharing settings are compromised.
The inclusion of 'sudo snap install obsidian' instructs privileged command execution. Although common for Linux package installation, embedding sudo guidance in a general-purpose skill with exec allowed raises the risk that an agent or user will perform elevated actions without sufficient review, potentially modifying the system unexpectedly.
│ └── 下载 .dmg 文件 → 拖拽到Applications └── Linux ├── AppImage（推荐，免安装） ├── Snap：sudo snap install obsidian └── Flatpak：flatpak install flathub md.obsidian.Obsidian
The skill is presented as a beginner Obsidian tutorial, but these sections redefine tutorial content as executable 'input/processing/output' operations. That mismatch can mislead an agent into treating instructional text as tool-driving workflow, expanding behavior beyond user education into unintended operational actions.
The skill explicitly classifies itself as 'MD+EXEC' even though its stated purpose is beginner onboarding for a local note-taking app. Unjustified exec capability increases the chance that an agent will run shell commands in response to loosely worded setup requests, which is unnecessary and expands attack surface.
The line "当前版本仅支持中文交互" imposes a specific language constraint in natural language. The file does not offer an opt-in language choice or document a justified region-specific requirement, so this is a language/locale policy violation under the stated rules.
The document states the skill is '完全中文化表达，适配中文用户工作流' and is aimed at Chinese-user workflows, which imposes a language/locale orientation in the skill content. There is no nearby indication that users can opt into another language or locale, so this appears to violate the policy requiring user choice or a clearly justified locale constraint.
Introducing ping and firewall/proxy diagnostics in an Obsidian beginner guide is a scope expansion from local tutorial content into network probing behavior. While low severity on its own, it normalizes diagnostic command use and may cause unnecessary command execution or disclosure about the local network environment.
The line recommends '拼写检查：关闭 | 中文用户建议关闭', which sets a locale-specific default behavior tied to Chinese users. Because it is framed as a normative recommendation rather than a user-selectable preference, it can be interpreted as a language/locale policy constraint without explicit opt-in.
The text says '拼写检查：关闭（中文用户）', again prescribing behavior based on user language/locale. The file does not clarify that this is optional or provide alternative guidance for non-Chinese users, which makes the locale-specific constraint insufficiently opt-in.
No suspicious patterns detected.