The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes standard shell commands such as cat, find, ls, and grep to manage files within a local directory. These commands are restricted to the path defined by the user in the OBSIDIAN_VAULT_PATH environment variable.
[INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it reads and processes the content of external Markdown files which could contain adversarial instructions.
Ingestion points: File content is ingested into the agent context via cat and grep operations as described in SKILL.md.
Boundary markers: No specific delimiters or "ignore" instructions are provided in the command examples to separate note content from system instructions.
Capability inventory: The skill has the ability to read, write, append to files, and list directory contents.
Sanitization: There is no evidence of sanitization or validation performed on the text content retrieved from the vault notes.

obsidian