cli-anything-obsidian

Warn

Audited by Socket on Apr 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill’s core behavior mostly matches its stated purpose and its data flow is local to Obsidian, but the package distribution is not verifiable from the cited evidence. That unverifiable installer is the main risk driver; command execution also makes the scope slightly broader than a simple note-management wrapper.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Apr 18, 2026, 12:04 PM
Package URL
pkg:socket/skills-sh/HKUDS%2FCLI-Anything%2Fcli-anything-obsidian%2F@9a5a4bcb140aef6c07d0aa9ac7d15644f6ce078f