obsidian
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches and installs the
obsidian-cliutility from theyakitrak/yakitrak/obsidian-cliHomebrew repository to enable vault management. - [COMMAND_EXECUTION]: The instructions utilize
obsidian-clito perform file management tasks like searching, creating, renaming, and deleting markdown notes within the user's vaults. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface by reading user-controlled data from local markdown files.
- Ingestion points: Note content read from vaults via the
search-contentcommand described inSKILL.md. - Boundary markers: Absent; no explicit delimiters separate user content from instructions.
- Capability inventory: The agent can create, move, and delete files using
obsidian-cliacross the vault. - Sanitization: Absent; the content of notes is retrieved and processed without specific validation or filtering.
Audit Metadata