obsidian-headless
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes Python scripts (
check_ob_installed.py,validate_vault_config.py, andgenerate_systemd_service.py) that perform system checks and configuration tasks. These scripts usesubprocess.runto execute commands likenodeandob. Analysis shows these are used for legitimate utility purposes, such as verifying versions and locating executable paths, with no evidence of unsafe shell injection patterns. - [EXTERNAL_DOWNLOADS]: The skill refers to the
obsidian-headlessNode.js package, which is a prerequisite for its operation. Instructions for installing this package from the standard npm registry are provided in the README and SKILL.md files, representing standard setup procedures for this type of tool.
Audit Metadata