Skip to main content

obsidian-hello-world

Creates a minimal Obsidian plugin to demonstrate core features like commands and settings for beginners.

Install this skill

or
62/100

Security score

The obsidian-hello-world skill was audited on May 25, 2026 and we found 10 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 103

Template literal with variable interpolation in command context

SourceSKILL.md
103new Notice(`Word count: ${count}`);
medium line 138

Template literal with variable interpolation in command context

SourceSKILL.md
138statusEl.setText(`Words: ${count}`);
medium line 147

Template literal with variable interpolation in command context

SourceSKILL.md
147console.log(`[${this.manifest.id}] loaded`);
medium line 151

Template literal with variable interpolation in command context

SourceSKILL.md
151console.log(`[${this.manifest.id}] unloaded`);
medium line 236

Template literal with variable interpolation in command context

SourceSKILL.md
236contentEl.createEl('p', { text: `Your vault has ${count} markdown files.` });
medium line 269

Template literal with variable interpolation in command context

SourceSKILL.md
269console.log(`[${this.manifest.id}] Opened: ${file.path}`);
medium line 278

Template literal with variable interpolation in command context

SourceSKILL.md
278new Notice(`New file: ${file.basename}`);
low line 309

External URL reference

SourceSKILL.md
309Obsidian uses [Lucide icons](https://lucide.dev/icons/). Common examples:
low line 340

External URL reference

SourceSKILL.md
340- [Lucide Icons](https://lucide.dev/icons/) — icon names for `addRibbonIcon`
low line 341

External URL reference

SourceSKILL.md
341- [Obsidian Hub](https://publish.obsidian.md/hub/) — community knowledge base
Scanned on May 25, 2026
View Security Dashboard
Installation guide →