obsidian-plugin-dev
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions emphasize security best practices by explicitly advising against the use of unsafe DOM manipulation methods like
innerHTMLandouterHTML, which helps prevent Cross-Site Scripting (XSS) vulnerabilities in generated plugins. - [SAFE]: The workflow aligns with standard development practices for the TypeScript ecosystem, utilizing routine build scripts (npm) and following the official Obsidian community submission process to a well-known repository.
- [SAFE]: No patterns of data exfiltration, credential harvesting, or unauthorized network operations were detected; the skill maintains a clear focus on the stated purpose of plugin development.
- [SAFE]: No forms of obfuscation, such as Base64 encoding of commands or hidden Unicode characters, are present in the skill files or instructions.
Audit Metadata