antigravity-obsidian
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The instructions guide the installation of the @bitbonsai/mcpvault package from the npm registry.
- [COMMAND_EXECUTION]: The skill provides configuration settings to execute a local command (mcpvault.cmd) to interface with the user's file system.
- [INDIRECT_PROMPT_INJECTION]: The integration of Obsidian notes introduces a surface for indirect prompt injection where the agent might process malicious instructions found within a vault.
- Ingestion points: The agent reads content directly from the user's local Obsidian vault files.
- Boundary markers: No explicit markers or warnings are defined to separate note content from system instructions.
- Capability inventory: The mcpvault tool allows the agent to read and create notes within the local file system.
- Sanitization: The instructions do not describe any sanitization or validation of the content retrieved from the vault.
Audit Metadata