obsidian-dev
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill provides comprehensive security guidelines, specifically advising against the use of
innerHTMLto prevent XSS vulnerabilities and recommending the use of Obsidian'sSecretStorageAPI for handling sensitive data like API keys. - [SAFE]: Instructions explicitly prohibit the agent from performing automatic git operations such as committing, pushing, or pulling without user consent, and warn against unnecessary network calls or vault data transmission.
- [COMMAND_EXECUTION]: The skill includes instructions for standard development workflows, such as running
pnpm buildandpnpm lintto verify code, and managing reference repositories usinggit cloneandgit fetch. - [EXTERNAL_DOWNLOADS]: The skill outlines a process for cloning external plugin or theme repositories into a dedicated
.refdirectory for reference when requested by the user.
Audit Metadata