obsidian-claude-integration

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill's manual installation step clones and installs the Obsidian MCP plugin from https://github.com/iansinnott/obsidian-claude-code-mcp.git which fetches and installs remote code that will be executed by Obsidian (used at runtime for Pattern C), making it a runtime external dependency that executes remote code.