Mmcp.market

Obsidian Hybrid Search

by flowing-abyss·io.github.flowing-abyss/obsidian-hybrid-search·v0.15.3

Search Obsidian vaults with hybrid full-text, fuzzy, semantic, and graph retrieval.

C57/100grade C
What users say
No reviews yet
Be the first
Safety scan
C57/100

full report

Adoption
Established

104 stars674 downloads/wk

Reviews

Write one

Nobody has reviewed Obsidian Hybrid Search yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Tools

Tool lists for local packages are only visible after install.

Public scan report

scanner v0.1.3 · 2026-09-19 · same rubric, same numbers if you re-run it

1 high1 medium
  • Code scan40 source files scanned8/25
  • Live reliabilityno gateway calls yet and no remote to proben/a
  • Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 1 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (2)

  • mediumeval / new Function usedexec.eval
    dist/eval/metrics.js: …/** * Pure metric functions for eval (nDCG, MRR, Hit@k, Recall@k). * No side …
  • highShell command built from a string (injection risk)exec.shell-concat
    dist/src/db.js: …xec('DELETE FROM chunks'); } db.exec(`CREATE VIRTUAL TABLE vec_chunks USING vec0( chunk_id INTEGER PRIMARY KEY, embedding float[${dim}] )`); db.prepare("INSERT OR R…
Overall 57/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Grade history

  • 2026-09-19restoreDCscore 57: Shell command built from a string (injection risk); eval / new Function used

Install directly

Runs npx -y obsidian-hybrid-search on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add obsidian-hybrid-search -- npx -y obsidian-hybrid-search
Add to Cursor

Alternatives to Obsidian Hybrid Search

Same job, ranked by rating then adoption.

See all →
  • Mindwtr
    Task and project automation for local and self-hosted Mindwtr Cloud data; read-only by default.
    A
  • OrchestKit Docs MCP
    Read-only MCP server for the OrchestKit docs: full-text search + Markdown fetch. No auth.
    A
  • gflow-cli
    Drive Google Flow from an agent: Veo video and Imagen image generation
    A
  • ofw-mcp
    OurFamilyWizard co-parenting for Claude — messages, calendar, expenses, and journal
    B
  • ITASCA MCP Server
    Give AI agents full access to ITASCA PFC, FLAC3D, 3DEC, MPoint, MassFlow: docs, simulation, plots.
    A