obsidian-todo-collector
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script
scripts/pre_check.pyto calculate file sizes and provide previews of documents before full processing. This script is distributed with the skill and performs basic file metadata checks. - [INDIRECT_PROMPT_INJECTION]: The skill processes the full content of user-provided Obsidian notes, which represents an attack surface for indirect prompt injection.
- Ingestion points: Reading Obsidian documents in
SKILL.md(step 2.4). - Boundary markers: None identified; the agent is instructed to read the raw text of the files.
- Capability inventory: Execution of local Python scripts and file writing/editing (via incremental replace) within the Obsidian vault.
- Sanitization: No specific content filtering or instructions to ignore embedded commands are present.
Audit Metadata