obsidian-cli

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). SKILL.md documents using the local Obsidian CLI (e.g., obsidian read/search/dev:errors/dev:screenshot/dev:dom/obsidian eval) which can ingest and exfiltrate locally stored note text, but it does not describe any runtime path where outsider-authored free text is read from an external queue/feed without selecting specific vault/file content.