OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass3 providerslatest audit May 12, 2026
Independent checks from skills.sh's audit partners.
The skill manages Obsidian vault profiles by manipulating symlinks and configuration files in the user's home directory. It includes a redaction mechanism for sensitive keys during display but remains susceptible to indirect prompt injection from local configuration files and lacks explicit input validation for command parameters.
Detected behaviors
No alerts
No issues