The Agent Skills Directory

[DYNAMIC_EXECUTION]: The skill exposes the obsidian eval command, which allows for the execution of arbitrary JavaScript code within the context of the running Obsidian application. This is a high-privilege capability that could be abused to perform any action the Obsidian API supports.
[INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection because it ingests untrusted data from a user's vault and possesses significant system-impacting capabilities.
Ingestion points: Data enters the agent's context through obsidian read, obsidian search, obsidian dev:dom (UI content), and obsidian dev:console (log output).
Boundary markers: The skill does not define boundary markers or provide instructions for the agent to ignore potentially malicious instructions embedded within the notes or logs it reads.
Capability inventory: The skill provides commands for file system modification (obsidian create, obsidian append), JavaScript execution (obsidian eval), and visual data capture (obsidian dev:screenshot).
Sanitization: There is no evidence of sanitization or validation logic to filter or escape content retrieved from the vault before it is processed by the agent.
[COMMAND_EXECUTION]: The skill relies on executing the obsidian CLI tool to perform all vault and development operations, which is the primary intended mechanism of the skill.

obsidian-cli