obsidian-vault
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard shell commands (
find,grep) to search and organize notes within a local Obsidian vault. The commands are scoped to the vault directory and exclude internal configuration folders (e.g.,.obsidian). - [EXTERNAL_DOWNLOADS]: The documentation provides installation and update commands pointing to the author's GitHub repository (
github.com/leoluyi/skills). These are standard package management operations for the platform. - [DATA_EXPOSURE]: The skill includes a hardcoded local path (
/Users/leoluyi/Library/CloudStorage/Dropbox/__notes-vault) belonging to the author. TheSKILL.mdand guides explicitly warn users to update this path to their own local vault location before use, which is a standard configuration requirement for local-first tooling.
Audit Metadata