Security audit
Security checks for vulnerabilities and agentic risk
This is a coherent Obsidian note-management skill, but users should be careful because it can modify or delete local vault notes through command-line actions.
Install this only if you want an agent to operate on your Obsidian vault with notesmd-cli. Before allowing deletes, moves, or bulk edits, ask the agent to list the exact target notes first and keep a backup or sync history available.
The manifest lists activation keywords such as "via", "obsidian", "plain", and "cli", several of which are generic terms that can appear in ordinary user requests unrelated to this skill. The description also does not provide scope limits or negative examples clarifying when these keywords should or should not invoke the skill.
The skill explicitly documents a destructive delete command without any warning, confirmation step, dry-run guidance, or backup recommendation. In an agent context with exec capability, this increases the chance that a user request or ambiguous instruction could lead to irreversible note deletion from the local vault.
A substantial portion of the skill description is presented only in Chinese, while the rest of the file is in English, and there is no indication that the skill is region-specific or that users can choose their preferred language. This creates an implicit locale constraint without opt-in or justification.
No suspicious patterns detected.
