obsidian-project-bootstrap
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a bundled Python script at '${CLAUDE_PLUGIN_ROOT}/skills/obsidian-project-memory/scripts/project_kb.py' using the system python3 interpreter to detect repository status and perform the bootstrap process.
- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface (Category 8) when reading repository files to synthesize notes. Ingestion points: Informative repository documentation and code entry points (SKILL.md, step 5). Boundary markers: None specified to delimit or disregard instructions within ingested files. Capability inventory: Subprocess execution via python3 and file-write access to the repository and Obsidian vault. Sanitization: No explicit content validation or sanitization is mentioned for the data read from the repository.
Audit Metadata