obsidian-second-brain

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). These links include a direct raw GitHub shell script (curl | bash) plus GitHub repositories used as upstream/install sources — executing such remote install scripts or running repo install scripts from less-known accounts can directly install arbitrary code and is a common malware vector.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow ingests outsider-authored free text from user-provided URLs/social content via commands like /obsidian-ingest <url|file|image|audio> and /x-read [url], which can deep-read external posts and then rewrite vault pages.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes installer commands that fetch and execute remote code during setup (npx/git clone and a curl | bash), e.g. https://github.com/akillness/jeo-skills, https://raw.githubusercontent.com/akillness/obsidian-second-brain/main/scripts/quick-install.sh, and https://github.com/akillness/obsidian-second-brain, which run remote code at install time.