obsidian-plugin-tasknotes Security Audit Report
obsidian-plugin-tasknotes is an AI agent skill, created by benoitjadinon and published at openclaw/skills. ClawSecure audited obsidian-plugin-tasknotes across 3 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 0/100 (High Risk). The 23 findings concentrate in Transitive Trust Abuse, Data Exfiltration and Policy Violation, including Script accesses environment variables and makes network calls in... and Environment variable access with network calls in scripts/tasks.py. 2 were rated high or critical severity.
Is obsidian-plugin-tasknotes safe?
ClawSecure audited obsidian-plugin-tasknotes and assigned a security score of 0/100 (High Risk), identifying 23 findings across Transitive Trust Abuse and Data Exfiltration. Review the findings below before installing.
What did ClawSecure find in obsidian-plugin-tasknotes?
ClawSecure identified 23 findings in obsidian-plugin-tasknotes, concentrated in Transitive Trust Abuse, Data Exfiltration and Policy Violation. 2 were rated high or critical severity. The most severe include Script accesses environment variables and makes network calls in... and Environment variable access with network calls in scripts/tasks.py.
How was obsidian-plugin-tasknotes audited?
ClawSecure ran obsidian-plugin-tasknotes through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 3 files from openclaw/skills.
What does a score of 0 mean?
ClawSecure assigned obsidian-plugin-tasknotes a security score of 0/100, placing it in the High Risk range. This is driven by 23 findings led by Transitive Trust Abuse that should be addressed before use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).
Audit Findings for obsidian-plugin-tasknotes
ClawSecure detected 23 security findings in obsidian-plugin-tasknotes, spanning Transitive Trust Abuse, Data Exfiltration, Policy Violation and Unauthorized Tool Use.
- critical · Script accesses environment variables and makes network calls in.... Data Exfiltration finding detected in
/tmp/url-scans/edc22e6ecbf0173f/scripts/tasks.py. - critical · Environment variable access with network calls in scripts/tasks.py. Data Exfiltration finding.
- medium · Pattern detected: import requests. Data Exfiltration finding detected in
scripts/tasks.py:29. - medium · Skill code uses network libraries but doesn't declare network.... Unauthorized Tool Use finding.
- medium · Pattern detected: import requests. Data Exfiltration finding detected in
scripts/tasks.py:29. - medium · Detects indirect prompt injection via instruction manipulation from.... Transitive Trust Abuse finding detected in
SKILL.md:24. - medium · Detects indirect prompt injection via instruction manipulation from.... Transitive Trust Abuse finding detected in
SKILL.md:27. - medium · Detects indirect prompt injection via instruction manipulation from.... Transitive Trust Abuse finding detected in
SKILL.md:30. - medium · Detects indirect prompt injection via instruction manipulation from.... Transitive Trust Abuse finding detected in
SKILL.md:33. - medium · Detects indirect prompt injection via instruction manipulation from.... Transitive Trust Abuse finding detected in
SKILL.md:36. - medium · Detects indirect prompt injection via instruction manipulation from.... Transitive Trust Abuse finding detected in
SKILL.md:39. - medium · Detects indirect prompt injection via instruction manipulation from.... Transitive Trust Abuse finding detected in
SKILL.md:42.
Showing the 12 highest-severity of 23 findings. The full interactive list appears below.
3-Layer Audit Protocol
Security Recommendations for obsidian-plugin-tasknotes
Audit external network connections
Resolve policy violations
Add a config.json permissions manifest
Related Security Research
ClawHavoc Explained: The Malware Family Targeting AI Agents→Beyond Static Scans: Why ClawSecure Verifies Agentic Intent→Related AI Agent Security Audits
Scanned on February 7, 2026. obsidian-plugin-tasknotes is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.