obsidian-vault-manager
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection because it ingests data from external sources and uses it to drive agent actions.
- Ingestion points: The
extract_obsidian_tasksworkflow reads from user-designated Obsidian notes, and thebuild_mocworkflow scans all files in the/output/directory. - Boundary markers: The instructions do not provide delimiters or specific guidelines for the agent to ignore or escape instructions that may be embedded within the notes being processed.
- Capability inventory: The skill performs file reading and writing operations (SKILL.md) to modify
task.mdand generate index notes. - Sanitization: There is no mention of sanitizing or validating the content extracted from the Obsidian notes (e.g., checkboxed tasks) before it is promoted to the central task list for the Orchestrator to execute.
Audit Metadata