obsidian-wiki-maintain

Warn

Audited by Socket on Jul 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS due to transitive skill installation and unpinned third-party install trust, not because of malicious data flow. The maintenance capabilities themselves align with the stated Obsidian wiki purpose and remain mostly local, but the `npx skills add ... --skill '*'` fallback expands trust to additional repo skills through a mutable install path.

Confidence: 88%Severity: 55%
Audit Metadata
Analyzed At
Jul 15, 2026, 02:52 AM
Package URL
pkg:socket/skills-sh/huajiexiewenfeng%2Fobsidian-llm-wiki%2Fobsidian-wiki-maintain%2F@4d82c244068e026908fed13e356ad30b1e172a9d3363598e848679550c7c1a92
Security Audit — socket — obsidian-wiki-maintain