obsidian-bases
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines a structured data format (.base) for use within the Obsidian note-taking application.
- [DYNAMIC_EXECUTION]: The skill documents a formula system for data manipulation. The expressions are limited to a domain-specific language within the Obsidian environment and do not allow for arbitrary system command execution.
- [DATA_EXPOSURE]: The skill accesses file metadata such as paths, sizes, and timestamps within the local Obsidian vault. This is a standard and expected feature for a tool designed to index and display note information.
- [INDIRECT_PROMPT_INJECTION]: The system processes metadata from user-created notes through formulas. The documentation includes functions for escaping HTML, which is a standard security practice for rendering untrusted content.
Audit Metadata