obsidian-literature-workflow
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides explicit instructions and scripts for the agent to execute in the local environment. These scripts (build_literature_canvas.py and build_literature_graph.py) are used to process markdown notes and generate project artifacts.\n- [DYNAMIC_EXECUTION]: The provided Python scripts dynamically load a shared utility module (project_kb) from a sibling skill directory (obsidian-project-memory). This facilitates modular code reuse across the project management skill suite and is implemented using localized path resolution.\n- [INDIRECT_PROMPT_INJECTION]: The workflow involves reading and parsing academic paper notes from the Papers/ directory. While these notes may originate from external sources like Zotero, the processing logic is limited to metadata and link extraction, posing a low risk for indirect instruction injection.
Audit Metadata