obsidian-publish-customize

Pass

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the user on how to use the obsidian and obsidian-headless (via the ob alias) command-line interfaces to publish publish.css and publish.js files to an Obsidian Publish site. These actions are within the expected scope of site customization.
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing the obsidian-headless package via a global NPM command to enable headless publishing. It also references official documentation repositories hosted on GitHub (obsidianmd/obsidian-help, obsidianmd/obsidian-developer-docs) as primary information sources.
  • [INDIRECT_PROMPT_INJECTION]: The skill utilizes an API that allows publish.js to ingest and process frontmatter metadata from Obsidian notes (ctx.frontmatter). While this creates a data ingestion surface, the risk is negligible as the data source is the user's own local vault.
  • Ingestion points: The publish.registerMarkdownPostProcessor function in publish.js accesses ctx.frontmatter from notes in SKILL.md.
  • Boundary markers: No specific delimiters or warnings for embedded instructions are mentioned.
  • Capability inventory: The skill possesses capabilities for shell command execution (obsidian CLI) and network operations (fetching the site cache via fetch).
  • Sanitization: The instructions do not specify sanitization or validation routines for the ingested frontmatter data.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 21, 2026, 04:07 PM