← Back to search Server uses network capabilities via: fetch() Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync() Server uses env_vars capabilities via: process.env
obsidian-project-cli
Cross-platform Obsidian vault project manager and scoped MCP server.
B
78.1 / 100
Versions
0.1.3latestApr 29, 2026
0.1.2Apr 29, 2026
0.1.1Apr 29, 2026
0.1.0Apr 29, 2026
Tools 2
request_common_update annotations: verified low
Create a GitHub PR proposing a diff-only common vault note update.
readOnlyHint true openWorldHint true
cli_spec annotations: verified low
Show the wrapped Obsidian CLI command spec.
readOnlyHint true openWorldHint false
Permissions 3
network medium shell high env_vars low Scan Findings 18
info
Tool 'request_common_update' annotations are consistent
info
Tool 'cli_spec' annotations are consistent
medium
OAuth implementation without PKCE
info
Sandbox failed to start for behavioral verification
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.29.0 (GHSA-6qxp-vccf-f47h)
medium
Vulnerable dependency: vitest@4.0.15 (GHSA-5xrq-8626-4rwp)
medium
Vulnerable dependency: vitest@4.0.15 (GHSA-82fw-gwwq-j7x9)
info
package.json metadata
info
Tool: request_common_update
info
Tool: cli_spec
info
Transport: streamable-http
info
Required env vars (12)
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
high
Permission: shell access detected
low
Permission: env_vars access detected
info
SBOM generated: 263 components
medium
No build provenance detected (SLSA L0)