claudian-installer

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute shell commands to create the plugin's target directory (mkdir -p) and move bundled assets including the JavaScript code and metadata (cp) into the user's Obsidian vault folder.
  • [DYNAMIC_EXECUTION]: The skill automates the installation of a bundled JavaScript file (main.js) into the Obsidian plugin system. This script is intended to be loaded and executed by the host application at runtime to provide its functionality. The plugin manifest specifies that this script will have access to file operations and system commands within the vault context.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 01:22 PM