ClawHub
Back to skill

Security audit

Obsidian Notesmd Cli

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward Obsidian note-management guide, with disclosed local file and command-line operations but no hidden install, persistence, or exfiltration behavior.

Install only if you want an agent to help operate on local Obsidian vaults through notesmd-cli. Before using move, metadata edit, or delete commands, confirm the exact note path and keep backups or version control for important vaults.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Behavioral ASTexec() Call, eval() Call, Dynamic Import
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Vague Triggers

Medium
Confidence
92% confidence
Finding
The trigger keyword list includes very generic terms such as "via", "plain", and "cli", which can cause the skill to activate in unrelated contexts. Because the skill exposes the exec tool and documents filesystem-affecting operations, unintended invocation increases the chance that an agent will run note-management commands on user files without clear user intent.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill explicitly documents a destructive delete command without any warning, confirmation requirement, backup guidance, or safer alternative. In an agent setting with exec access, this can normalize silent deletion behavior and lead to accidental loss of Markdown notes or related vault content when the user did not appreciate the operation's irreversibility.

Static analysis

No suspicious patterns detected.