using-obsidian
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes command-line interfaces such as
obsidian-clifor vault interaction anddefuddlefor markdown extraction from the web. - [EXTERNAL_DOWNLOADS]: Capabilities like
wiki-auto-researchanddefuddleinvolve fetching data from external web sources to populate the Obsidian vault. - [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection. It ingests data from untrusted sources (web pages and external files) and has the capability to write this data into the local filesystem.
- Ingestion points: Web content via
defuddleandwiki-auto-research; external files viaobsidian-file-intelandwiki-ingest. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the provided documentation.
- Capability inventory: File system read/write, metadata manipulation, web search, and CLI execution.
- Sanitization: No documented sanitization, escaping, or validation logic for external content.
Audit Metadata