Security audit

FlowMind

Security checks across malware telemetry and agentic risk

Overview

FlowMind is a straightforward API skill for managing a user's FlowMind productivity data, with its external access and account-changing capabilities disclosed in the documentation.

Install only if you want an agent to access and modify your FlowMind workspace. Store the API key securely, use a revocable or least-privilege key if FlowMind offers one, and require explicit confirmation before deleting or bulk-changing goals, tasks, notes, people, or tags.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (4)

Vague Triggers

Medium

Confidence: 88% confidence
Finding: The activation text is broad enough to trigger on many generic productivity requests, increasing the chance the agent invokes this external-service skill when the user did not specifically intend to use FlowMind. That can cause unnecessary transmission of user data to a third-party API and create opportunities for unintended state-changing actions.

Missing User Warnings

Medium

Confidence: 93% confidence
Finding: The documentation exposes destructive delete operations for goals, tasks, notes, people, and tags without any warning about irreversible data loss or a requirement for confirmation. In an agent setting, this raises the risk of accidental or over-broad deletion from natural-language instructions or misinterpretation.

Missing User Warnings

Medium

Confidence: 90% confidence
Finding: The setup asks for a bearer API key but does not warn that the skill will access and modify personal productivity data on an external service. Users or deployers may not realize the scope of access granted or that account data, including notes and contacts, will be transmitted to FlowMind.

Tool Parameter Abuse

High

Category: Tool Misuse
Content: POST /people — create (required: name) GET /people/:id PATCH /people/:id DELETE /people/:id GET /people/:id/tags — list tags POST /people/:id/tags — add tag (body: {tag_id}) DELETE /people/:id/tags/:tagId
Confidence: 95% confidence
Finding: DELETE /people/:id

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.