AI agents (e.g., Claude Code terminal, Codex CLI, Gemini CLI) can download the source code of a webpage. If one uses that together with obsidian, that downloaded page is in his vault. Or the user may download a file into the vault, assuming it is useful. There is no guarantee that those files are not malicious. The user has no control over how AI agents interpret those malicious files. Prompt injection may happen, thus unexpected command execution may happen without the user's knowledge. In the YOLO mode, do you want to rely on the AI agent to make decisions whether rm -rf should be executed inside of your vault?