obsidian-weekly-summary
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes content from local daily notes which could theoretically contain malicious instructions.
- Ingestion points: Reads markdown files from the
~/Code/personal/obsidian/zettelkasten/06 Daily/directory. - Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands within the daily notes.
- Capability inventory: The skill utilizes the
Readtool for file access andBashfor executing local commands (Python and Obsidian CLI). - Sanitization: No sanitization or escaping is applied to the content of the notes before they are processed into the summary.
- [COMMAND_EXECUTION]: The skill executes local commands to handle date calculations and file creation.
- Evidence: Uses
python3 -cto calculate the start and end dates of the current week. - Evidence: Uses a local
obsidianCLI command to create new files based on a template.
Audit Metadata