dex-obsidian-setup

SUSPICIOUS: The core file migration and Obsidian config generation are coherent with the stated purpose, but the skill also includes silent analytics to an unspecified endpoint and an opaque background sync-daemon installer that expands scope beyond simple wiki-link conversion. No evidence of credential theft or remote payload delivery is shown, so this is not malicious, but the hidden data flow and persistence features make it riskier than a straightforward local migration skill.