obsidian-project-memory

Pass

Audited by Gen Agent Trust Hub on Mar 24, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/project_kb.py utilizes subprocess.check_output to execute standard git commands for repository state detection and change tracking. The commands (e.g., git rev-parse, git status, git diff) are executed using argument lists rather than shell strings, and are limited to benign repository management tasks.\n- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it is designed to ingest and synthesize arbitrary repository content into Obsidian notes.\n
  • Ingestion points: Content is read from Markdown files, research documents, and analysis outputs via the collect_markdown_sources and collect_result_files functions in scripts/project_kb.py.\n
  • Boundary markers: None are explicitly used when interpolating file content into prompts for agent-driven synthesis.\n
  • Capability inventory: The skill allows for local file system read/write operations, directory management (including shutil.rmtree for purging projects), and standard git command execution.\n
  • Sanitization: The skill relies on the agent's synthesis logic and lacks explicit sanitization for ingested repository content.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 24, 2026, 12:47 AM