Notion IM Helper

Sync IM messages to Notion via Notion API. Supports 7 content types, 4 formats, 2 metadata types. Append-only to a single Notion page.

What to check before installing: 1) Be aware the skill DOES require NOTION_API_KEY and NOTION_PARENT_PAGE_ID (despite the top-level registry listing saying none) — set those as environment variables and use a test Notion page first. 2) If you plan to upload local images, the code imports notion-upload (notion_upload) which is not clearly declared in the instructions; inspect that library or avoid local-file uploads. 3) The skill will read/write small local files (.pending_batch.json, and documentation mentions .pending_content.txt) and on Windows attempts to read user environment variables from the registry — be comfortable with those filesystem/registry accesses. 4) The skill supports an 'undo' that deletes blocks via the Notion API; grant it access only to a page you trust and consider testing undo behavior. 5) Owner and metadata inconsistencies (ownerId differences and missing install declarations) are signs of sloppy packaging — if you are risk-averse, request an updated package that corrects the metadata and explicitly lists all runtime dependencies before installing.

Type: OpenClaw Skill Name: notion-im-helper Version: 1.7.1 The skill bundle provides legitimate Notion integration but contains high-risk capabilities that could be exploited. Specifically, `scripts/record.py` allows the AI agent to upload arbitrary local files to Notion via the `image` command without validating file types or restricting directory paths, which could be used to exfiltrate sensitive files (e.g., SSH keys, configuration files) if the agent is manipulated. Additionally, `scripts/notion_client.py` includes logic to read from the Windows Registry (`HKEY_CURRENT_USER\Environment`), an unusually broad method for retrieving environment variables. While these features support the stated purpose of syncing content and images, the lack of input sanitization and the broad file access qualify as significant security vulnerabilities.