obsidian-mcp-plugin

The plugin implements robust security measures including granular operation permissions (read-only mode, create, update, delete, move, rename, execute), path validation against traversal attacks, and a .mcpignore file for exclusions. Authentication is enforced via API keys (Bearer/Basic token) which are generated securely and stored in plugin settings. A 'dangerouslyDisableAuth' option exists but is explicitly named as a warning. The 'eval' equivalent (new Function()) is used within a controlled context for Bases formulas and filter expressions, which is a common pattern for user-defined scripting in applications but represents a dynamic code execution point. Network access for web fetching is an explicit tool AI must choose.