obsidian-debug-bundle
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_CONTEXT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute shell commands such as ls, cat, find, du, and wc to gather vault metadata. These operations are transparent and consistent with the intended purpose of generating a debug report.\n- [DYNAMIC_CONTEXT_INJECTION]: The skill uses dynamic context markers (
!) to run shell commands at load time for environment discovery. The commands executed (node, python3, and uname) are limited to version checking and system identification.\n- [DYNAMIC_EXECUTION]: The skill generates inline Python and JavaScript code from static templates to process JSON data and capture console errors. These scripts are used locally for data formatting and do not involve remote code loading.\n- [SAFE]: The skill demonstrates security best practices by providing explicit logic and checklists for redacting sensitive information like API keys, tokens, and private paths from the diagnostic output before it is shared.
Audit Metadata