obsidian-plugin-svelte
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing well-known development dependencies (
svelte,svelte-preprocess,esbuild-svelte,svelte-check, andtypescript) from the official npm registry.\n- [PROMPT_INJECTION]: The skill handles data from the Obsidian vault (such as file names and contents), which represents a surface for indirect prompt injection. This is a common characteristic of Obsidian plugins and is managed via standard UI-level escaping.\n - Ingestion points: Vault data access (
plugin.app.vault) and workspace events (file-open) inSKILL.mdandreferences/store-patterns.md.\n - Boundary markers: None defined in the provided code examples.\n
- Capability inventory: Standard UI mounting and state management within the Obsidian environment.\n
- Sanitization: Employs Svelte's native template escaping for rendered content.
Audit Metadata