flomo-memo-to-markdown
Warn
Audited by Socket on Aug 24, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s overall purpose is coherent with exporting flomo notes, and data appears to stay within flomo/local outputs rather than a third-party collector. However, it achieves this by extracting desktop auth from local LevelDB instead of using flomo’s documented export/API/MCP token flows, which creates moderate credential-handling and scope concerns.
Confidence: 87%Severity: 62%
Audit Metadata