tentacle-obsidian-init

Pass

Audited by Gen Agent Trust Hub on Mar 20, 2026

Risk Level: SAFE
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The documentation in '.agents/skills/AGENTS.md' provides commands to install Homebrew, Bun, and uv. These commands reference official installation scripts from well-known technology providers and are intended for manual environment preparation by the user.
  • [COMMAND_EXECUTION]: The 'init_vault.py' script uses 'shutil.copytree' to set up the vault structure. This script performs a localized file operation to merge the scaffold directory with the current workspace, which is the expected function of a scaffolding skill.
  • [PROMPT_INJECTION]: The skill includes an 'AGENTS.md' file that outlines directory standards and behavioral constraints for agents. These instructions establish a predictable operating environment and do not attempt to override the underlying safety protocols of the AI.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 20, 2026, 06:31 AM
Security Audit — agent-trust-hub — tentacle-obsidian-init