obsidian-vault-manager

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the subprocess.run method in scripts/obsidian_cli.py to execute a local binary (defaulting to 'obsidian') to perform vault and note operations. This is the primary functionality of the tool.
  • [COMMAND_EXECUTION]: A safety filter, _is_destructive, is implemented in the CLI wrapper to identify and block potentially dangerous commands (such as permanent deletion) unless the user or agent explicitly provides a --force-delete flag.
  • [COMMAND_EXECUTION]: The scripts/vault_registry.py script manages a local JSON registry of vaults, allowing the agent to discover, add, and switch between different note directories on the local system.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 03:15 AM
Security Audit — agent-trust-hub — obsidian-vault-manager