obsidian-headless

Pass

Audited by Gen Agent Trust Hub on Apr 16, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes Python scripts (check_ob_installed.py, validate_vault_config.py, and generate_systemd_service.py) that perform system checks and configuration tasks. These scripts use subprocess.run to execute commands like node and ob. Analysis shows these are used for legitimate utility purposes, such as verifying versions and locating executable paths, with no evidence of unsafe shell injection patterns.
  • [EXTERNAL_DOWNLOADS]: The skill refers to the obsidian-headless Node.js package, which is a prerequisite for its operation. Instructions for installing this package from the standard npm registry are provided in the README and SKILL.md files, representing standard setup procedures for this type of tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 16, 2026, 02:49 PM