obsidian-automation
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute various shell commands including
grep,find,sed,awk, andmvto manipulate vault files, and utilizes theobsidian-clifor API-driven interactions with Obsidian. - [DYNAMIC_EXECUTION]: The skill is designed to generate multi-step Bash and Python scripts based on user requirements to perform automated vault maintenance and note processing.
- [INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface for indirect prompt injection by processing markdown content from the vault, which could potentially contain malicious instructions affecting the script generation or command execution flow.
- Ingestion points: Markdown files (.md) within the Obsidian vault processed by the agent (SKILL.md).
- Boundary markers: None explicitly implemented to separate data from instructions.
- Capability inventory: Shell command execution, Python runtime access, and Local REST API control via CLI.
- Sanitization: Lacks explicit sanitization logic for vault content before it is interpolated into scripts or commands.
Audit Metadata