obsidian-clipper-template-creator
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external URLs and local base files to generate Obsidian templates, which could be manipulated by an attacker to influence the agent's output.
- Ingestion points: The skill uses
WebFetchto retrieve content from user-provided URLs (references/analysis-workflow.md) and reads local schema files fromTemplates/Bases/(references/bases-workflow.md). - Boundary markers: No explicit delimiters or instructions are provided to the agent to ignore potentially malicious embedded content within the fetched HTML or local files.
- Capability inventory: The skill utilizes network fetching (
WebFetch) and local file reading to gather data for template generation. - Sanitization: There is no evidence of sanitization or validation performed on the external content before it is used to draft the JSON templates.
- [EXTERNAL_DOWNLOADS]: The skill instructions direct the agent to use the
WebFetchtool to retrieve the content of remote URLs provided by the user for analysis.
Audit Metadata