soia-pkm-compose-article-draft
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation references an installation command using
npxto fetch thesoia-team/soia-open-skillspackage. As this originates from the skill's verified author (soia-team), it is documented as a standard vendor resource and does not present a security risk. - [SAFE]: Analysis of the skill's operational logic shows it reads from and writes to specific directories within a user's Obsidian vault (e.g.,
50_草稿/). This is the intended behavior for a personal knowledge management (PKM) tool and no malicious data exfiltration or unauthorized command execution patterns were identified. - [SAFE]: The skill processes data from external vault files, creating a surface for potential indirect prompt injection which is handled as a safe architectural property for this tool type.
- Ingestion points: Obsidian vault files including
## 我的看法,## 原文,50_草稿/, and00_Obsidian系统/个人说明书.md. - Boundary markers: Absent; instructions do not specify delimiters to separate untrusted data from the system prompt.
- Capability inventory: File-write access to the Obsidian vault to save drafts (SKILL.md).
- Sanitization: No explicit validation or escaping of the ingested vault content is described.
Audit Metadata