ClawHub

Flomo笔记同步

Security checks across malware telemetry and agentic risk

Overview

This is a small Flomo note-sync helper that sends user-selected text to the webhook URL the user stores locally.

Install this only if you want your agent to send selected note text to Flomo. Keep ~/.flomo_token private, store only your intended Flomo webhook there, ensure curl and jq are installed, and avoid syncing secrets or sensitive notes unless you are comfortable sending them to that webhook.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
89% confidence
Finding
The skill advertises and instructs use of a shell script (`scripts/flomo.sh`) but does not declare corresponding permissions, creating a capability/permission mismatch. This is dangerous because users and enforcement layers may not realize the skill can execute local commands and transmit data externally, reducing transparency and weakening review controls.

Vague Triggers

Medium
Confidence
91% confidence
Finding
The trigger phrases are broad and ambiguous, including general mentions like '同步到flomo', '记到flomo', and '#flomo', which can cause the skill to activate in contexts where the user did not intend immediate external transmission. Because this skill sends content to a webhook, overbroad activation increases the risk of accidental exfiltration of sensitive notes, links, or conversation fragments.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The skill description explains how to send content to flomo but does not clearly warn that user-provided content will be transmitted to an external webhook stored in `~/.flomo_token`. This lack of disclosure is especially risky because the skill accepts '任意内容片段格式', making it easy for users to unknowingly send sensitive data, internal links, or personal notes to a third-party endpoint.

VirusTotal

No VirusTotal findings

View on VirusTotal