obsidian-multi-env-setup
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
Bashtools and shell scripts to manage vault directory structures (mkdir -p), create symbolic links (ln -s) for plugin development, and perform file operations for environment synchronization. - [EXTERNAL_DOWNLOADS]: The instructions involve cloning Obsidian community plugins from GitHub repositories, specifically
pjeby/hot-reload,denolehov/obsidian-git, andTfTHacker/obsidian42-bratto support development and synchronization workflows. - [DYNAMIC_EXECUTION]: The skill includes TypeScript scripts for test data generation executed via
npx ts-nodeand standardnpmbuild commands for plugin compilation. - [INDIRECT_PROMPT_INJECTION]: The skill processes vault templates and generates test notes, representing an indirect prompt injection surface.
- Ingestion points: Vault templates in the
vault-template/directory and note content arrays inscripts/generate-test-data.tsare used to populate vaults. - Boundary markers: No specific delimiters or warnings are used to isolate embedded instructions in generated notes.
- Capability inventory: The skill utilizes
Write,Bash(mkdir), andBash(ln)capabilities to manage the generated content. - Sanitization: Content is written directly to files without escaping or validation, though the behavior is consistent with standard note management applications.
Audit Metadata