obsidian-vault — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited obsidian-vault (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Assume the user is running this skill from inside a vault. Resolve the vault root using git:
VAULT=$(git rev-parse --show-toplevel)All commands below use $VAULT. Mostly flat at root level.
Ralph Wiggum Index.md, Skills Index.md, RAG Index.md)[[wikilinks]] syntax: [[Note Title]][[wikilinks]]VAULT=$(git rev-parse --show-toplevel)
# Search by filename
find "$VAULT" -name "*.md" | grep -i "keyword"
# Search by content
grep -rl "keyword" "$VAULT" --include="*.md"Or use Grep/Glob tools directly on the vault path.
[[wikilinks]] to related notes at the bottomSearch for [[Note Title]] across the vault to find backlinks:
VAULT=$(git rev-parse --show-toplevel)
grep -rl "\\[\\[Note Title\\]\\]" "$VAULT"VAULT=$(git rev-parse --show-toplevel)
find "$VAULT" -name "*Index*"Detect note titles mentioned in prose that aren't wrapped in [[wikilinks]]. This catches references the author forgot to link.
.md)[[ ]]VAULT=$(git rev-parse --show-toplevel)
# Get all note titles
titles=$(find "$VAULT" -name "*.md" -printf '%f\n' | sed 's/\.md$//')
# For each title, find mentions not wrapped in [[ ]]
for title in $titles; do
grep -rn --include="*.md" "$title" "$VAULT" \
| grep -v "\[\[$title\]\]" \
| grep -v "^.*/$title\.md:"
doneOr use Grep to search for a specific title and manually check which hits lack wikilink syntax.
Detect tags that look like near-duplicates (case differences, typos, plural/singular variants).
VAULT=$(git rev-parse --show-toplevel)
grep -roh '#[A-Za-z0-9_/-]\+' "$VAULT" --include="*.md" \
| sort | uniq -c | sort -rn#RAG vs #rag vs #Rag):grep -roh '#[A-Za-z0-9_/-]\+' "$VAULT" --include="*.md" \
| sort -u | awk '{lower=tolower($0); if (seen[lower]++) print prev[lower], $0; else prev[lower]=$0}'grep -roh '#[A-Za-z0-9_/-]\+' "$VAULT" --include="*.md" \
| sort | uniq -c | sort -n | head -30Review the low-count tags against the high-count list. Tags used only once or twice are likely misspellings of an existing tag.
grep -rn '#suspicioustag' "$VAULT" --include="*.md"~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.