The Agent Skills Directory

[PERSISTENCE]: Configures an automated synchronization workflow using a cron job to maintain ongoing activity and network communication.
Evidence: */30 * * * * cd /home/maria/notes/vault && git add -A && git diff --cached --quiet || git commit -m "backup $(date +%Y-%m-%d_%H:%M)" && git push in SKILL.md.
[DATA_EXFILTRATION]: The automated synchronization script transmits the entire contents of the Obsidian vault to a remote Git repository.
Evidence: Use of git push within a recurring background task to export local Markdown notes to an external remote.
[EXTERNAL_DOWNLOADS]: Instructs the user to download and install software from non-verified community repositories.
Evidence: git clone https://github.com/jackyzha0/quartz.git && cd quartz && npm i in SKILL.md.
[DYNAMIC_EXECUTION]: Utilizes plugins that execute arbitrary JavaScript logic embedded within local note files.
Evidence: Instructions for using dataviewjs code blocks and Templater script tags (<% ... %>) to perform runtime computations.
[COMMAND_EXECUTION]: Uses the curl command with security-downgrading flags to interact with local services.
Evidence: Use of curl -k in SKILL.md to interact with the Local REST API, which bypasses SSL certificate verification.
[INDIRECT_PROMPT_INJECTION]: The skill implements a workflow that ingests and processes local content that may contain untrusted instructions.
Ingestion points: Reads all Markdown files within the vault for processing by Dataview, Templater, and custom plugins.
Boundary markers: Absent; there are no delimiters or instructions provided to the agent to distinguish between data and embedded instructions.
Capability inventory: The agent has access to file system modification (vault.modify), network exfiltration (git push), and local shell interaction via the Obsidian CLI.
Sanitization: Absent; content extracted from notes is passed directly to dynamic execution engines without validation or escaping.

obsidian