Security risk report for @forgecat/kepano_obsidian-skills v0.1.2
Source Integrity
Low
Profile is sourced from a legitimate GitHub repository (kepano/obsidian-skills) with clear attribution and MIT license.
Original commit hash and platform provenance (Claude Code plugin) are documented, enabling verification.
Agent Intent
Low
Content describes legitimate Obsidian file manipulation (Markdown, Bases, Canvas) with no instructions to ignore system prompts, exfiltrate data, or install malicious payloads.
Defuddle skill recommends a legitimate web-scraping tool for documentation reading; no guidance poisoning or typosquatted packages detected.
All skills document standard, well-known tools (Obsidian CLI, Defuddle, JSON Canvas spec) with no hidden malicious instructions or role hijacking.
Details
Evidence
Skills focus on file I/O and vault operations: 'Create and edit Obsidian vault files', 'Interact with Obsidian vaults using the Obsidian CLI'
Defuddle usage is transparent: 'Extract clean markdown content from web pages using Defuddle CLI'
No instructions to read ~/.ssh, ~/.aws, .env, or transmit data to external hosts
Permissions
PRM-000Medium
obsidian-cli skill grants broad vault access (read, create, search, manage notes, run JavaScript via `eval`) and plugin/theme development capabilities (reload, screenshot, DOM inspection, console access) — authority somewhat broader than typical file-editing use cases.
defuddle skill permits arbitrary web fetching via URL parameter, which could be abused to fetch malicious content or exfiltrate data via side-channel (though the tool itself is legitimate).
json-canvas and obsidian-markdown skills are narrowly scoped to file creation/editing and do not request excessive authority.
ForgeCat