obsidian-vault-ops
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process content from local markdown files. While this is standard functionality for vault management, it inherently possesses a surface for indirect prompt injection if the files being read contain malicious instructions.
- Ingestion points: Local markdown files read via the 'Read' and 'Grep' tools as described in the File Operations section.
- Boundary markers: No explicit boundary markers or instructions to ignore embedded instructions are present in the skill body.
- Capability inventory: The skill uses file system tools (Read, Write, Edit, Glob, Grep) to manage vault content.
- Sanitization: No sanitization or validation of the file content is mentioned in the instructions.
Audit Metadata