Skip to content
skillsafebeta
← Report library
Purpose / Data analysis

Obsidian Bases Skill Security Audit

What the author says it does (original text)

Create and edit Obsidian Bases (.base files) with views, filters, formulas, and summaries. Use when working with .base files, creating database-like views of notes, or when the user mentions Bases, table views, card views, filters, or formulas in Obsidian.

Independent security check

No obvious risks found in this check

Files checked
2
Risks found
0
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.No risks found
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.No risks found
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.No risks found
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.No risks found
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.No risks found
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.No risks found

Inside this skill

8 instruction sections

The Skill’s main operation is to create or edit a YAML-formatted `.base` file in the user’s Obsidian vault, configure filters, formulas, and views, and validate the YAML and referenced properties.

View source
SKILL.md:10In the instructionsOpen original file
1. **Create the file**: Create a `.base` file in the vault with valid YAML content2. **Define scope**: Add `filters` to select which notes appear (by tag, folder, property, or date)3. **Add formulas** (optional): Define computed properties in the `formulas` section4. **Configure views**: Add one or more views (`table`, `cards`, `list`, or `map`) with `order` specifying which properties to display5. **Validate**: Verify the file is valid YAML with no syntax errors. Check that all referenced properties and formulas exist. Common issues: unquoted strings containing special YAML characters, mismatched quotes in formula expressions, referencing `formula.X` without defining `X` in `formulas`6. **Test in Obsidian**: Open the `.base` file in Obsidian to confirm the view renders correctly. If it shows a YAML error, check quoting rules below

A generated Base view can read and display note paths, timestamps, tags, links, and all frontmatter properties in the vault. The supplied material only describes using this data inside Obsidian and does not instruct sending it to an external service.

View source
SKILL.md:132In the instructionsOpen original file
|----------|------|-------------|| `file.name` | String | File name || `file.basename` | String | File name without extension || `file.path` | String | Full path to file || `file.folder` | String | Parent folder path || `file.ext` | String | File extension || `file.size` | Number | File size in bytes || `file.ctime` | Date | Created time || `file.mtime` | Date | Modified time || `file.tags` | List | All tags in file || `file.links` | List | Internal links in file || `file.backlinks` | List | Files linking to this file || `file.embeds` | List | Embeds in the note || `file.properties` | Object | All frontmatter properties |

The Skill recommends opening the generated file in Obsidian to test rendering. It separately states that map views require the Maps community plugin, but provides no installation command, download step, or privilege-escalation instruction.

View source
SKILL.md:15In the instructionsOpen original file
5. **Validate**: Verify the file is valid YAML with no syntax errors. Check that all referenced properties and formulas exist. Common issues: unquoted strings containing special YAML characters, mismatched quotes in formula expressions, referencing `formula.X` without defining `X` in `formulas`6. **Test in Obsidian**: Open the `.base` file in Obsidian to confirm the view renders correctly. If it shows a YAML error, check quoting rules below
SKILL.md:260In the instructionsOpen original file
### Map ViewRequires latitude/longitude properties and the Maps community plugin.

The included reference file is a formula-function catalog that documents file lookup, HTML rendering, and HTML escaping. These are capability descriptions, not instructions to execute arbitrary code or make network requests.

View source
references/FUNCTIONS_REFERENCE.md:17In the instructionsOpen original file
| `list()` | `list(element): List` | Wrap in list if not already || `file()` | `file(path): file` | Get file object || `image()` | `image(path): image` | Create image for rendering || `icon()` | `icon(name): icon` | Lucide icon by name || `html()` | `html(string): html` | Render as HTML || `escapeHTML()` | `escapeHTML(string): string` | Escape HTML characters |
Start here · InstructionsSKILL.md
obsidian-bases
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source. 5 more sections are available in the original file.

File reference map

References: 1
Files making referencesReferenced content
Lines show actual file references, not execution order. Select a node to highlight its connections and inspect the files and source locations. Dashed lines include files that still need locating.
Files and check records2 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included
  • references/FUNCTIONS_REFERENCE.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions
  • references/FUNCTIONS_REFERENCE.mdSupporting file

Operations mentioned in code and instructions

Connect to websites
SKILL.md:495In the instructionsOpen original file
- [Bases Syntax](https://help.obsidian.md/bases/syntax)- [Functions](https://help.obsidian.md/bases/functions)
SKILL.md:496In the instructionsOpen original file
- [Bases Syntax](https://help.obsidian.md/bases/syntax)- [Functions](https://help.obsidian.md/bases/functions)- [Views](https://help.obsidian.md/bases/views)
SKILL.md:497In the instructionsOpen original file
- [Functions](https://help.obsidian.md/bases/functions)- [Views](https://help.obsidian.md/bases/views)- [Formulas](https://help.obsidian.md/formulas)
Lines read
674
File checksum (to compare versions)
ed4931af2726f580da09741471ce4f1d2db44675ebc57d9e624f901f8c6cd832