obsidian-dev

Pass

Audited by Gen Agent Trust Hub on Apr 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: The skill provides comprehensive security guidelines, specifically advising against the use of innerHTML to prevent XSS vulnerabilities and recommending the use of Obsidian's SecretStorage API for handling sensitive data like API keys.
  • [SAFE]: Instructions explicitly prohibit the agent from performing automatic git operations such as committing, pushing, or pulling without user consent, and warn against unnecessary network calls or vault data transmission.
  • [COMMAND_EXECUTION]: The skill includes instructions for standard development workflows, such as running pnpm build and pnpm lint to verify code, and managing reference repositories using git clone and git fetch.
  • [EXTERNAL_DOWNLOADS]: The skill outlines a process for cloning external plugin or theme repositories into a dedicated .ref directory for reference when requested by the user.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 16, 2026, 02:49 PM