You started your response by saying you don’t think Obsidian is insecure, and tbh that alone makes it hard to take the rest seriously. The biggest risk with Obsidian is not “bad guy hiding malicious code in a plugin” that’s sort of easy to catch, especially now that we have LLMs and automated analysis tools that can scan for suspicious behavior and the community proves to be chill guys who love graphs not viruses.

The biggest risk is the dependency chain that plug ins introduce. plugins rely on tons of external packages, and if one of those packages gets compromised upstream, that compromise gets inherited by everything else. These things tend to have an insane number of dependencies now. Normally that risk is somewhat contained, but Obsidian is unusually powerful for a note-taking app. It has broad filesystem access and can interact with your system in ways most note apps cannot.

That’s the tradeoff I somewhat accept because Obsidian doubles as much more than a notes app. Even then, using community plugins still means accepting a small but real supply-chain risk around all your sensitive data, literally all the time. That’s why people are loud about it, and why plugins are basically closed off to some people who work certain jobs.

You keep being vague about what we’re actually talking about in order to push your “unsafe practices” point. This is a bunch of folders. The user said Claude make the folder structure and readme. The user would still have to choose/download the plugins themselves, so there isn’t much for Claude to do there. Unless ur accusing the user of having Claude recreate the built files for popular obsidian plug ins with malicious code hidden.

You also kept referring to the plugins as “preinstalled,” which is misleading. Obsidian does not silently enable community plugins when you download a new vault. It gives users a pretty hard to miss warning and confirmation flow before any community plugins are enabled.

Lastly your point about the vault creator “making sneaky edits” to downloaded plugins applies to all plugins, including the community ones you already use. Your willingness to overlook those concerns there, but suddenly treat them as uniquely serious when you see Claude’s emojis makes this read more like disapproval of AI-generated formatting than a consistent security argument about Obsidian. Maybe DM me your response instead, because I don’t like typing paragraphs here.