obsidian-core-workflow-b
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a development template for building Obsidian plugins. It includes UI component classes (modals, views), editor commands, and Vault API usage for file manipulation.
- [COMMAND_EXECUTION]: The skill requests
Bash(npm:*)tool access in its frontmatter, which is consistent with its stated purpose of assisting with plugin development and dependency management (e.g.,npm install obsidian). - [DATA_EXPOSURE]: Code snippets demonstrate reading files from the Obsidian vault (
app.vault.getMarkdownFiles(),app.vault.cachedRead()), but these are part of legitimate plugin functionalities (calculating word counts, creating daily notes) and do not contain exfiltration logic. - [SAFE]: No obfuscation, hardcoded credentials, or suspicious remote downloads are present. References are limited to official Obsidian documentation and standard development tools.
Audit Metadata