obsidian-mcp

Pass

Audited by Gen Agent Trust Hub on Aug 2, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill outlines a secure architecture using local inter-process communication (CDP) and REST APIs to interact with Obsidian vaults. It documents safety mechanisms including a SafetyManager, configurable WRITE_MODE (off, safe, confirm, full), and automatic backups to protect user data.- [COMMAND_EXECUTION]: Standard development commands (npm install, npm run build, npm start) are documented for local project setup and testing.- [SAFE]: The use of environment variables for local API keys (OBSIDIAN_API_KEY) follows best practices for credential management in development environments.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 2, 2026, 02:21 PM
Security Audit — agent-trust-hub — obsidian-mcp