obsidian

SUSPICIOUS: the skill's file access and note-management actions fit its stated Obsidian purpose, and there is no obvious credential harvesting or exfiltration. However, it relies on a community CLI from a third-party Homebrew tap rather than an official Obsidian distribution, which creates moderate supply-chain trust risk disproportionate to an otherwise simple local-notes helper.