obsidian-organizer
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a dedicated 'obsidian' CLI tool to perform vault operations. It features a specific safety rule prohibiting the use of raw shell commands (such as 'mv' or 'rm') for file mutations, ensuring the Obsidian application can maintain internal link consistency.
- [INDIRECT_PROMPT_INJECTION]: The skill relies on external, user-controlled content within the vault to guide its filing and auditing logic, which presents a potential injection surface.
- Ingestion points: The agent reads the '00_Index/Folder_Map.md' file and performs content searches across vault notes using the 'obsidian' CLI.
- Boundary markers: There are no explicit delimiters or instructions provided to the agent to isolate or ignore potential commands embedded within the vault data.
- Capability inventory: The skill has the ability to create, move, rename, and delete files within the vault, as well as read vault content.
- Sanitization: The skill does not implement sanitization or validation logic for the data read from the vault before using it to determine folder placement or reorganization plans.
Audit Metadata