flomo-memo-to-markdown
Warn
Audited by Snyk on Aug 24, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The required runtime workflow reads memo text (
raw_memo.get("content")) from the user’s local flomo desktop/API state (including HTML inplain_text = ... html_to_markdown(content_html)) and converts it into Markdown, so outsider-authored free text is ingested indirectly via the user’s flomo memos.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata