soia-pkm-library-book-catalog
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed to manage local Obsidian vaults by reading and writing Markdown files. It does not require internet access or external API keys (like WeChat Reading). All operations are local and idempotent.
- [SAFE]: While the skill ingests data from external Markdown files which could contain instructions (Indirect Prompt Injection surface), its capabilities are restricted to local file manipulation. It does not have access to tools that could lead to code execution or data exfiltration.
- Ingestion points: Files located in the directory specified by
OBSIDIAN_VAULTin the vault's library directory. - Boundary markers: No explicit instructions to ignore embedded content are used when parsing book cards, though the data is handled as string variables.
- Capability inventory: File reading (
pathlib.Path.read_text) and writing (pathlib.Path.write_text). No network or subprocess capabilities are present. - Sanitization: Metadata values are cleaned using regular expressions and string stripping to remove comments and extra quotes.
Audit Metadata