ClawHub
Back to skill

Security audit

Obsidian

Security checks across malware telemetry and agentic risk

Overview

This is a straightforward Obsidian note-automation skill, with expected read and command-line access but some deletion-risk guidance users should handle carefully.

Install only if you want an agent to operate on your Obsidian vault through obsidian-cli. Before allowing delete or move actions, confirm the active vault and exact note path, and keep normal vault backups because the skill itself does not require a confirmation step.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill documents destructive operations such as `obsidian-cli delete "path/note"` without any warning, backup guidance, or confirmation requirement. In an agent context with exec capability, this increases the chance of accidental or over-broad deletion of user notes and attachments, especially if the model infers paths incorrectly or acts on ambiguous prompts.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.