obsidian

Warn

Audited by Socket on Jun 26, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's note-management capabilities are coherent, but its install instructions are inconsistent with the official Obsidian CLI and route trust through a third-party community tool. Main risk is supply-chain/install trust, not overt malware or exfiltration.

Confidence: 89%Severity: 58%
Audit Metadata
Analyzed At
Jun 26, 2026, 05:36 PM
Package URL
pkg:socket/skills-sh/CraftOS-dev%2FCraftBot%2Fobsidian%2F@9c3c9ada9ae7b6312d2f458844438220352a5f195961ec0e71dbcc098faf2865
Security Audit — socket — obsidian