obsidian-multi-env-setup

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses Bash tools and shell scripts to manage vault directory structures (mkdir -p), create symbolic links (ln -s) for plugin development, and perform file operations for environment synchronization.
  • [EXTERNAL_DOWNLOADS]: The instructions involve cloning Obsidian community plugins from GitHub repositories, specifically pjeby/hot-reload, denolehov/obsidian-git, and TfTHacker/obsidian42-brat to support development and synchronization workflows.
  • [DYNAMIC_EXECUTION]: The skill includes TypeScript scripts for test data generation executed via npx ts-node and standard npm build commands for plugin compilation.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes vault templates and generates test notes, representing an indirect prompt injection surface.
  • Ingestion points: Vault templates in the vault-template/ directory and note content arrays in scripts/generate-test-data.ts are used to populate vaults.
  • Boundary markers: No specific delimiters or warnings are used to isolate embedded instructions in generated notes.
  • Capability inventory: The skill utilizes Write, Bash(mkdir), and Bash(ln) capabilities to manage the generated content.
  • Sanitization: Content is written directly to files without escaping or validation, though the behavior is consistent with standard note management applications.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:48 AM