obsidian-automation

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s behavior mostly matches its stated Obsidian automation purpose, and data stays local to the vault and localhost API. The main issue is install-trust inconsistency: it steers users to outdated/community CLI and plugin tooling instead of the current official built-in Obsidian CLI, so credentialed local automation is being delegated to third-party components with medium supply-chain risk.

Confidence: 90%Severity: 58%
Audit Metadata
Analyzed At
Sep 16, 2026, 02:39 AM
Package URL
pkg:socket/skills-sh/ericgandrade%2Fobsidian-superskills%2Fobsidian-automation%2F@123a78977d659c33c2121fb839613cbed886d8fd03e835b7f28e9d8635f677df