The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input from external research papers (titles, abstracts, and summaries) and writes them directly into Markdown files within a user's Obsidian vault. This creates a surface for indirect prompt injection or markdown injection.
Ingestion points: CLI arguments passed to scripts/create_summary.py (specifically --title, --authors, --abstract, and --summary) are the entry points for external data.
Boundary markers: The skill uses simple placeholders in templates/paper_summary.md (e.g., {{abstract}}) but does not implement delimiters or warnings to prevent the agent or Obsidian from misinterpreting embedded instructions.
Capability inventory: The skill possesses the Write capability to modify the local filesystem and the Bash capability to execute scripts, making the impact of successful injection more significant within the Obsidian environment.
Sanitization: The Python script performs basic whitespace stripping but lacks robust escaping or validation to filter out malicious Markdown, CSS snippets, or plugin-specific syntax (such as Dataview or Templater commands) that could be embedded in a paper's abstract.

obsidian-summarize