obsidian

SUSPICIOUS. The skill's local vault-management behavior is broadly consistent with its purpose, but the install path is not: it directs the agent to use a community Homebrew tap and outdated CLI naming instead of Obsidian's official bundled CLI. This is primarily a supply-chain trust issue, not confirmed malware, and there is no evidence of credential harvesting or external data exfiltration in the skill itself.