The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes markdown files from a user's vault, which represents an ingestion point for untrusted data if the vault contains content from external sources.
Ingestion points: The skill reads vault content using the Read, Grep, and mcp__obsidian__read-note tools to perform health diagnostics and metadata checks.
Boundary markers: No specific boundary markers or instructions were found to prevent the agent from following instructions embedded within the notes it processes.
Capability inventory: The skill is authorized to use the Bash, Write, and Edit tools, allowing it to modify files and execute local shell commands based on its analysis.
Sanitization: There is no evidence of sanitization or filtering of note content before it is processed by the agent's logic.
[COMMAND_EXECUTION]: The skill is designed to work with an Obsidian CLI wrapper (obs) and uses the Bash tool to perform vault-wide operations such as listing orphans or editing frontmatter.

obsidian-vault