obsidian-publish-customize
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the user on how to use the
obsidianandobsidian-headless(via theobalias) command-line interfaces to publishpublish.cssandpublish.jsfiles to an Obsidian Publish site. These actions are within the expected scope of site customization. - [EXTERNAL_DOWNLOADS]: The skill recommends installing the
obsidian-headlesspackage via a global NPM command to enable headless publishing. It also references official documentation repositories hosted on GitHub (obsidianmd/obsidian-help,obsidianmd/obsidian-developer-docs) as primary information sources. - [INDIRECT_PROMPT_INJECTION]: The skill utilizes an API that allows
publish.jsto ingest and process frontmatter metadata from Obsidian notes (ctx.frontmatter). While this creates a data ingestion surface, the risk is negligible as the data source is the user's own local vault. - Ingestion points: The
publish.registerMarkdownPostProcessorfunction inpublish.jsaccessesctx.frontmatterfrom notes inSKILL.md. - Boundary markers: No specific delimiters or warnings for embedded instructions are mentioned.
- Capability inventory: The skill possesses capabilities for shell command execution (
obsidianCLI) and network operations (fetching the site cache viafetch). - Sanitization: The instructions do not specify sanitization or validation routines for the ingested frontmatter data.
Audit Metadata