Fireflies

• Analyzed: May 12, 2026, 3:17 AM
• Findings: 1
• Version: 1.0.1
• Hash: c61fce0eba859af4b83a01bd1a1ab29f9434569c8191ed1cdc9f6d39e0621c9a
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw skill bundle for Fireflies.ai is benign. All `curl` commands in `SKILL.md` target the legitimate Fireflies.ai GraphQL API (`https://api.fireflies.ai/graphql`) and use the `FIREFLIES_API_KEY` solely for authentication to this service. There is no evidence of data exfiltration to unauthorized endpoints, malicious command execution (e.g., `curl|bash`), attempts at persistence, or prompt injection against the AI agent. The skill's actions are entirely consistent with its stated purpose of accessing Fireflies.ai meeting data.