obsidian-plugin-release
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational content and boilerplate code for Obsidian plugin distribution, focusing on developer workflows.
- [EXTERNAL_DOWNLOADS]: Example GitHub Action workflows reference standard actions from the GitHub marketplace, such as
actions/checkout,actions/setup-node, andsoftprops/action-gh-release. These are well-known and standard tools for CI/CD pipelines. - [COMMAND_EXECUTION]: The documentation includes standard build and release commands (e.g.,
npm install,npm run build,gh release create) and provides a helper Node.js script for synchronizing version numbers in local manifest files. - [CREDENTIALS_UNSAFE]: The skill explicitly warns developers against hardcoding secrets in their source code and provides recommended patterns for secure, user-managed secret storage within the plugin settings.
- [SAFE]: No obfuscation, persistence mechanisms, or unauthorized data access patterns were identified. The content aligns with its stated purpose of assisting plugin developers.
Audit Metadata