obsidian-ops
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands for project operations such as building, linting, and version control.\n
- Evidence:
references/build-workflow.mdspecifies execution ofnpm run buildandnpx grunt build.\n - Evidence:
references/quick-sync-guide.mdandreferences/sync-procedure.mdautomategit pullandgit logcommands.\n- [EXTERNAL_DOWNLOADS]: The skill fetches configuration and documentation from well-known sources.\n - Evidence:
references/sync-procedure.mdcontains workflows for pulling updates from Obsidian's official GitHub repositories.\n - Evidence:
references/quick-reference.mdincludes anadd refcommand which allows cloning of external repositories from user-supplied URLs to manage project references.\n- [PROMPT_INJECTION]: The skill contains a surface for indirect prompt injection via the processing of external repository content.\n - Ingestion points: The skill pulls content from remote git repositories into the local
.ref/directory viagit pullas documented inreferences/sync-procedure.md.\n - Boundary markers: Absent. There are no instructions to delineate or treat content from synced repositories as untrusted data.\n
- Capability inventory: The skill has the ability to execute shell commands (
npm,grunt,git) and read local files as shown inreferences/build-workflow.mdandreferences/summarize-commands.md.\n - Sanitization: Absent. The skill analyzes file changes and generates summaries without sanitizing the input data for potential malicious instructions.
Audit Metadata