flomo-crud-skill

• Outcome: Review
• Latest audit: May 28, 2026 at 10:25 AM UTC
• Version:
  1.0.0

Overview

The skill mostly matches its Flomo memo-automation purpose, but it grants broad control inside a logged-in browser session and includes under-scoped fallback/delete and local-path reporting behaviors that users should review carefully.

Install only if you intend to let an agent operate on your live Flomo account. Use a dedicated browser profile if possible, keep delete/edit actions interactive, do not share install or config paths with the author or third parties, and prefer query-only use unless you need write access.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 94% confidence
• Finding: The document explicitly describes a destructive delete fallback using internal Vue component methods without requiring a user-facing confirmation or an explicit pre-delete verification step beyond matching a memo_id. In this skill's context, automation runs against a live logged-in flomo session, so an incorrect target selection, stale page state, or misuse of the fallback could permanently delete user data with little friction or visibility.

VirusTotal

62/62 vendors flagged this skill as clean.