obsidian-dev-rules
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The documentation provides standard setup instructions using
git clone,npm install, andnpm run devfor local development environments. These commands are intended for the user's local machine to initialize a plugin project.\n- [EXTERNAL_DOWNLOADS]: References official resources including theobsidian-sample-pluginrepository and theobsidian-releasesrepository on GitHub. These links are provided as authoritative sources for project templates and the community submission process.\n- [INDIRECT_PROMPT_INJECTION]: The skill provides a comprehensive set of "Hard rules" and developer policies that explicitly warn against insecure coding practices, such as usinginnerHTMLwith dynamic content. This serves as a defensive layer when the agent is tasked with generating or reviewing code for Obsidian plugins.
Audit Metadata