OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass3 providerslatest audit Sep 15, 2026
Independent checks from skills.sh's audit partners.
The skill captures conversation data and saves it to a local Obsidian vault, using an external search indexer (qmd). It is susceptible to indirect prompt injection from the conversation history and uses environment variables to define execution paths for shell commands.
Detected behaviors
No alerts
No issues