obsidian-vault

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill prompt includes a hardcoded API key value directly in the documentation, which violates secure secret management practices.

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

• Secret detected (high risk: 1.00). The documentation contains a high-entropy hex string (d4fc944e64f535df05b34c2e8596c4e3eaffc6dfd5b5ee15e76789a4ab96698a) explicitly designated as the API Key for the Obsidian Local REST API service. This is a functional credential providing unauthorized access to local vault notes and data.