The Agent Skills Directory

[COMMAND_EXECUTION]: The obsidian_search.py script utilizes ripgrep and grep via subprocess.run for efficient vault searching. These calls use argument lists rather than shell strings, effectively preventing shell injection. Additionally, search query terms are sanitized using re.escape() to mitigate regex-based attacks.
[SAFE]: Markdown frontmatter parsing is implemented using yaml.safe_load(). This is a critical security practice that prevents arbitrary code execution vulnerabilities associated with unsafe YAML deserialization.
[SAFE]: Note creation logic in obsidian_cli.py includes a sanitization step for note titles using regular expressions. This prevents path traversal attempts that might use special characters in the title to write files outside the intended vault directory.
[SAFE]: The file discovery logic (using rglob) explicitly filters out hidden files and directories (those starting with a dot). This provides a layer of protection against accidental exposure or modification of sensitive system files or configuration data within the vault path.

obsidian