obsidian-knowledge
Pass
Audited by Gen Agent Trust Hub on Apr 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
obsidianCLI tool and standard shell commands (likeopenandsleep) to interact with the Obsidian application and manage vault files. These operations are strictly limited to the intended productivity workflow and do not involve arbitrary system modification.\n- [PROMPT_INJECTION]: The skill's 'Clipping Save' and 'Knowledge Organizer' features process external web content, creating a surface for indirect prompt injection. (1) Ingestion points: Data from thesearch-and-fetchskill and files in the31_WebClips/folder. (2) Boundary markers: The agent is instructed to respect privacy tags (#Private, #Key), but no specific escape delimiters are used for web content. (3) Capability inventory: Extensive file interaction capabilities via theobsidianCLI. (4) Sanitization: The skill mandates a summarization and knowledge extraction process, which naturally filters content through the agent's reasoning before it is saved.\n- [SAFE]: The skill implements clear privacy boundaries and a 'read-before-write' protocol (Section Editing Protocol), ensuring that the agent does not modify sensitive information or inadvertently overwrite important user data.
Audit Metadata