obsidian-automation
Warn
Audited by Socket on Sep 16, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s behavior mostly matches its stated Obsidian automation purpose, and data stays local to the vault and localhost API. The main issue is install-trust inconsistency: it steers users to outdated/community CLI and plugin tooling instead of the current official built-in Obsidian CLI, so credentialed local automation is being delegated to third-party components with medium supply-chain risk.
Confidence: 90%Severity: 58%
Audit Metadata