obsidian-project-memory
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/project_kb.pyutilizessubprocess.check_outputto execute standardgitcommands for repository state detection and change tracking. The commands (e.g.,git rev-parse,git status,git diff) are executed using argument lists rather than shell strings, and are limited to benign repository management tasks.\n- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it is designed to ingest and synthesize arbitrary repository content into Obsidian notes.\n - Ingestion points: Content is read from Markdown files, research documents, and analysis outputs via the
collect_markdown_sourcesandcollect_result_filesfunctions inscripts/project_kb.py.\n - Boundary markers: None are explicitly used when interpolating file content into prompts for agent-driven synthesis.\n
- Capability inventory: The skill allows for local file system read/write operations, directory management (including
shutil.rmtreefor purging projects), and standard git command execution.\n - Sanitization: The skill relies on the agent's synthesis logic and lacks explicit sanitization for ingested repository content.
Audit Metadata