flomo-memo-to-markdown

Warn

Audited by Socket on Aug 24, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s overall purpose is coherent with exporting flomo notes, and data appears to stay within flomo/local outputs rather than a third-party collector. However, it achieves this by extracting desktop auth from local LevelDB instead of using flomo’s documented export/API/MCP token flows, which creates moderate credential-handling and scope concerns.

Confidence: 87%Severity: 62%
Audit Metadata
Analyzed At
Aug 24, 2026, 02:10 PM
Package URL
pkg:socket/skills-sh/undertone0809%2Fzee-skills%2Fflomo-memo-to-markdown%2F@5eaece99374ff7abc3564f1e9631af09255c197487544729e75726998172ab46
Security Audit — socket — flomo-memo-to-markdown