obsidian-second-brain

SUSPICIOUS: the skill's core behavior mostly matches its stated Obsidian/research purpose, and install sources appear same-project rather than covert third parties. However, the combination of transitive skill installation, official-but-risky `curl|bash`, autonomous scheduled rewriting, and ingestion of untrusted web content with write/exec permissions makes the overall security posture medium risk.

No clear indicators of intentional malware (no obfuscation, no exfiltration, no backdoor/persistence beyond an expected jeo hook, no credential theft). However, the script increases supply-chain risk by fetching and executing third-party code (npx from REPO_URL; git clone/pull from UPSTREAM_URL; executing upstream scripts; installing a runtime hook that will execute the resolved adapter). Without version pinning/integrity checks in this script, compromise of those sources could lead to arbitrary code execution in the user’s environment.