obsidian-literature-workflow

SUSPICIOUS: the core literature-note behavior is coherent and mostly filesystem-local, but the skill materially depends on other skills, including a third-party Zotero bridge whose provenance is weaker than the Obsidian same-repo references. No direct credential harvesting or exfiltration is visible here, yet the transitive trust chain and broad write scope raise medium risk.