obsidian-wiki-query

SUSPICIOUS. The core wiki-query behavior is aligned and mostly local, but the missing-runtime fallback introduces a transitive trust chain by installing another third-party skill via `npx skills add`, and `--skill '*'` is broader than necessary. No clear exfiltration or credential harvesting is visible in this SKILL.md, so this is better classified as medium security risk rather than malware.