lov-obsidian-reset-cache
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands to interact with the system environment and manage application cache files.
- Evidence: The workflow in
SKILL.mdusespgrep -x Obsidianto verify the application's status andrm -rf ~/Library/Application\ Support/obsidian/IndexedDB/to perform the cache reset. - [INDIRECT_PROMPT_INJECTION]: The skill exposes a surface for processing user-supplied triggers that lead to administrative actions on the host system.
- Ingestion points: Triggers based on user queries such as "obsidian startup hangs," "loading cache," or Chinese equivalents like "obsidian 卡住" defined in
SKILL.md. - Boundary markers: The instructions mandate a verification step using
AskUserQuestionto confirm the application is closed before executing destructive commands. - Capability inventory: Includes the ability to check running processes, delete specific application directories, and write a
.obsidianignorefile to the user's vault. - Sanitization: The deletion capability is strictly scoped to the Obsidian application's standard cache path, preventing arbitrary file system access.
Audit Metadata