obsidian-vault-search
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill uses the
uvpackage manager for dependency handling. Whilepyyamlis declared as a dependency inscripts/vault_search.py, it is currently unused in the script's logic, and no other external libraries are required. - [COMMAND_EXECUTION]: The script
scripts/vault_search.pyexecutes theripgreputility to search Markdown files. This execution is performed usingsubprocess.runwith arguments passed as a list andshell=False, which prevents shell command injection vulnerabilities even when handling natural language queries. - [PROMPT_INJECTION]: The skill processes content from local Markdown files, which represents an indirect prompt injection surface.
- Ingestion points: Markdown files in the vault accessed via
ripgrepoutput. - Boundary markers: None explicitly defined in the script; the AI agent is responsible for orchestrating the tool and interpreting the output.
- Capability inventory: Local file search and metadata retrieval across
.mdfiles. - Sanitization: Individual search terms are escaped using
re.escape()before being used in search patterns.
Audit Metadata