skills/obra/dotfiles/syncing-obsidian/Socket

syncing-obsidian

Warn

Audited by Socket on Jul 7, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s purpose is coherent, but its core dependency is an unverified `obsync` CLI rather than the official same-org Obsidian headless CLI. Because this external CLI appears to receive account credentials and possibly encryption passwords, the install/data-flow trust is disproportionate and high risk even without confirmed malicious intent.

Confidence: 85%Severity: 86%

Audit Metadata

Analyzed At

Jul 7, 2026, 04:25 AM

Package URL

pkg:socket/skills-sh/obra%2Fdotfiles%2Fsyncing-obsidian%2F@8de509af35d9f41c621af1f70a7be5ae70767c7aabb601726343c852a412842b