obsidian-frontmatter
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of instructional content and templates for managing Markdown metadata. It does not include any scripts, executables, or network-enabled commands.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing untrusted note content. Ingestion points: User-provided Obsidian notes (referenced in SKILL.md, Workflow Step 1). Boundary markers: The skill strictly uses '---' delimiters to define the YAML block and instructions emphasize line 1 placement. Capability inventory: No shell commands, network requests, or sensitive file access patterns are present in the skill files. Sanitization: The workflow provides explicit rules for quoting special characters and validating date formats to ensure data integrity and prevent syntax-based injection.
Audit Metadata