Security audit
Obsidian (Linux)
Security checks across malware telemetry and agentic risk
Overview
This skill is a straightforward Obsidian note helper, but it can read and change local vault notes when used.
Install this only if you trust notesmd-cli and are comfortable letting an agent read and modify the selected Obsidian vault. Confirm the vault and note path before overwrite, move, or delete operations, and avoid using it on vaults that contain information you do not want exposed in the agent session.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.