cli-anything-obsidian
Warn
Audited by Socket on Apr 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The skill’s core behavior mostly matches its stated purpose and its data flow is local to Obsidian, but the package distribution is not verifiable from the cited evidence. That unverifiable installer is the main risk driver; command execution also makes the scope slightly broader than a simple note-management wrapper.
Confidence: 84%Severity: 72%
Audit Metadata