FlowMind

• Analyzed: May 12, 2026, 3:11 AM
• Findings: 1
• Version: 1.0.2
• Hash: 28d45fdac69e15b18fee82868c2fa243fdab1a2c31e59b346707c1793800e86d
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw skill bundle for FlowMind is benign. It provides instructions and API documentation for interacting with a productivity service at `https://flowmind.life/api/v1` using a `FLOWMIND_API_KEY`. All described API calls are standard REST operations (GET, POST, PATCH, DELETE) for managing goals, tasks, notes, people, and tags. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, obfuscation, or prompt injection attempts against the agent in `SKILL.md` or `references/api.md`. The skill's behavior is clearly aligned with its stated purpose.