obsidian

SUSPICIOUS. The functionality is broadly consistent with managing Obsidian vaults, but the skill blurs official branding by linking to Obsidian docs while actually depending on an unrelated third-party obsidian-cli from a personal repo. Data flow remains local and there is no credential exfiltration evidence, so this is not malware, but install trust is disproportionally weak for a skill presented as an Obsidian integration.