obsidian-project-memory
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/project_kb.pyscript utilizes thesubprocessmodule to execute Git commands (e.g.,git rev-parse,git diff,git status). These calls are used exclusively for repository state detection and file change tracking within the project scope. The arguments are programmatically controlled and do not involve unsanitized user input. - [DATA_EXPOSURE]: The skill reads and writes to the local file system, specifically within the repository being analyzed and the designated Obsidian vault path. This access is consistent with its stated purpose of maintaining project memory and research documentation. No sensitive environment variables or hardcoded credentials were detected.
- [REMOTE_CODE_EXECUTION]: All logic is contained within the local skill scripts (
scripts/project_kb.pyandscripts/project_views.py). There are no external downloads or network requests performed by the skill's code.
Audit Metadata