Skip to main content

obsidian-hello-world

Creates a minimal Obsidian plugin to demonstrate core features like commands and settings for beginners.

Install this skill

or
62/100

Security score

The obsidian-hello-world skill was audited on May 12, 2026 and we found 10 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 99

Template literal with variable interpolation in command context

SourceSKILL.md
99new Notice(`Word count: ${count}`);
medium line 134

Template literal with variable interpolation in command context

SourceSKILL.md
134statusEl.setText(`Words: ${count}`);
medium line 143

Template literal with variable interpolation in command context

SourceSKILL.md
143console.log(`[${this.manifest.id}] loaded`);
medium line 147

Template literal with variable interpolation in command context

SourceSKILL.md
147console.log(`[${this.manifest.id}] unloaded`);
medium line 230

Template literal with variable interpolation in command context

SourceSKILL.md
230contentEl.createEl('p', { text: `Your vault has ${count} markdown files.` });
medium line 261

Template literal with variable interpolation in command context

SourceSKILL.md
261console.log(`[${this.manifest.id}] Opened: ${file.path}`);
medium line 270

Template literal with variable interpolation in command context

SourceSKILL.md
270new Notice(`New file: ${file.basename}`);
low line 298

External URL reference

SourceSKILL.md
298Obsidian uses [Lucide icons](https://lucide.dev/icons/). Common examples:
low line 325

External URL reference

SourceSKILL.md
325- [Lucide Icons](https://lucide.dev/icons/) — icon names for `addRibbonIcon`
low line 326

External URL reference

SourceSKILL.md
326- [Obsidian Hub](https://publish.obsidian.md/hub/) — community knowledge base
Scanned on May 12, 2026
View Security Dashboard
Installation guide →