obsidian-bases
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions describe the configuration and syntax for a legitimate file format (.base) used by an Obsidian plugin. The behavior is consistent with the stated purpose of note organization and visualization.\n- [INDIRECT_PROMPT_INJECTION]: The skill defines a system for ingesting data from external notes, which represents a potential injection surface. However, this is inherent to the functionality of a note-indexing tool and no malicious exploitation patterns were found.\n
- Ingestion points: Note properties, tags, and metadata (SKILL.md).\n
- Boundary markers: None specified in the instructions.\n
- Capability inventory: Reading file metadata and writing .base configuration files (SKILL.md).\n
- Sanitization: The skill provides an
escapeHTML()function for use in formulas (references/FUNCTIONS_REFERENCE.md).
Audit Metadata