obsidian-kb-artifacts
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and format content within an Obsidian vault, which involves reading and writing to files that may contain untrusted data.
- Ingestion points: The skill reads from various directories including
Sources/,Knowledge/,Experiments/, andMaps/as defined inreferences/CANVAS.mdandreferences/OBSIDIAN-MARKDOWN.md. - Boundary markers: No explicit delimiters or instructions are provided to the agent to treat vault content as potentially adversarial data.
- Capability inventory: The skill has capabilities to write files (
.canvas,.base,.md) and execute commands via theobsidianCLI (searching, reading, and appending). - Sanitization: The instructions do not specify any sanitization or validation logic for the content retrieved from the vault.
- [COMMAND_EXECUTION]: The skill leverages a local CLI tool for vault management operations.
- Evidence:
references/CLI.mdprovides examples of shell commands such asobsidian search query="..."andobsidian read file="..."for navigating and editing the knowledge base.
Audit Metadata