The skill allows command injection and
Claims to do
P.A.R.A. Manager Skill: Assistant for managing P.A.R.A. personal knowledge system (Projects, Areas, Resources, Archives) in Obsidian through natural dialogue.
Actually does
This skill uses `obsidian-cli` to create, open, search, and move files and folders within an Obsidian vault, adhering to a P.A.R.A. (Projects, Areas, Resources, Archives) structure. It leverages `obsidian-markdown` to format content and add metadata to these files, using built-in templates from its `references/` folder. It also reads existing files to analyze the system's status and provide recommendations.
Shell command execution function detected
system (
The skill uses `obsidian-cli` for file system operations (create, move, read, search) where user input is used to construct arguments. Without proper sanitization, this could lead to command injection or path traversal, allowing arbitrary file system manipulation.
Create folders via obsidian-cli skill
The skill uses `obsidian-cli` to 'search and read files in P.A.R.A. folders' for system analysis. If user input can influence search paths or criteria, this capability could be abused to enumerate or read sensitive files outside the intended scope.
Read structure: use obsidian-cli to search and read files in P.A.R.A. folders
User-provided text (e.g., project names, descriptions) is used to 'adapt content (fill {{DATE}}, {{NAME}}, etc.)' within Markdown templates. If this input is not sanitized, an attacker could inject malicious Markdown, HTML, or JavaScript into the user's knowledge base.
New project: ask name, deadline, priority, goal → use Project.md template → fill metadata
[](https://mondoo.com/ai-agent-security/skills/github/shestera/second-brain-skills/para-manager)<a href="https://mondoo.com/ai-agent-security/skills/github/shestera/second-brain-skills/para-manager"><img src="https://mondoo.com/ai-agent-security/api/badge/github/shestera/second-brain-skills/para-manager.svg" alt="Mondoo Skill Check" /></a>https://mondoo.com/ai-agent-security/api/badge/github/shestera/second-brain-skills/para-manager.svgSkills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.