obsidian-plugin-events
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of documentation and TypeScript code templates intended for use in Obsidian plugin development. It does not contain any executable scripts, automated tasks, or commands that run on the user's system.
- [DATA_EXPOSURE]: Code snippets in
SKILL.mdinclude a reference to a WebSocket (wss://example.com/feed). This is identified as a standard educational placeholder used to demonstrate cleanup procedures and does not represent a risk of data exfiltration. - [INDIRECT_PROMPT_INJECTION]: The documentation provides templates for handling external input via
editor-pasteandeditor-dropevents. While these events represent an attack surface for untrusted data ingestion, the skill correctly follows and promotes Obsidian development best practices, such as checkingdefaultPreventedto ensure compatibility and security with other plugins.
Audit Metadata