← Back to Skills Marketplace
Notion
by
JordanCoin
· GitHub ↗
· v0.1.0
951
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install notioncli
Description
Notion API for creating and managing pages, databases, blocks, relations, rollups, and multi-workspace profiles via the notioncli CLI tool.
Usage Guidance
This appears to be a legitimate Notion CLI skill, but verify a few things before installing: 1) Confirm the npm package author (@jordancoin) and review the package source (the GitHub repo) to ensure it's the expected code. 2) Check where 'notion init' stores your NOTION_API_KEY and whether it's encrypted or stored plaintext; prefer storing keys in a secure vault. 3) Limit the API key's scopes to only the databases/workspaces needed. 4) Because the registry metadata contradicts the SKILL.md (env/install omissions) and an install.sh is present, prefer installing in a controlled environment or inspect the install.sh contents first. If you are not comfortable inspecting code, avoid global npm installs from unverified publishers.
Capability Analysis
Type: OpenClaw Skill
Name: notioncli
Version: 0.1.0
The skill installs `notioncli`, a legitimate tool for interacting with the Notion API. While the `SKILL.md` and `install.sh` do not contain any direct malicious instructions or prompt injection attempts, the `notion upload` command (documented in SKILL.md) grants the AI agent the capability to read arbitrary local files (e.g., `notion upload <page-id> ./screenshot.png`). This local file access, even if intended for legitimate uploads to Notion, represents a high-risk capability and broad permission that could be exploited by a malicious prompt to exfiltrate sensitive local files, classifying it as suspicious rather than benign.
Capability Assessment
Purpose & Capability
The SKILL.md describes a Notion CLI (create/update/delete pages, query DBs, comments, users) and declares NOTION_API_KEY and an npm install of @jordancoin/notioncli — which is appropriate for this purpose. However, the registry metadata above says 'Required env vars: none' and 'No install spec', which contradicts the SKILL.md. Also SKILL.md expects npm to be available but the skill doesn't declare npm as a required binary.
Instruction Scope
The runtime instructions stay within Notion management (listing DBs, creating/updating pages, comments). They instruct running 'notion init --key $NOTION_API_KEY' which will 'save your API key' and auto-discover databases. The SKILL.md does not say where or how the key is stored (file path, encryption), which is a privacy/security detail worth verifying.
Install Mechanism
Install is via npm global package (@jordancoin/notioncli) referenced in SKILL.md metadata. Installing a global npm package is a moderate risk: it runs third-party code on your system. The registry claims 'no install spec', yet SKILL.md provides an npm install command and an install.sh file exists in the bundle — this packaging inconsistency increases risk because it's unclear which install path the marketplace expects to run.
Credentials
NOTION_API_KEY is the single credential the CLI needs and is proportional to the functionality. But the marketplace metadata omitted that requirement, and SKILL.md's 'init' will persist the key locally without describing storage/permissions. You should ensure the API key has minimal scopes and confirm where the key is saved.
Persistence & Privilege
No 'always: true' and no special persistent privileges are requested. Model invocation settings are default (model can invoke), which is typical for a user-invoked integration.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install notioncli - After installation, invoke the skill by name or use
/notioncli - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
- Initial release of the Notion CLI skill for interacting with the Notion API.
- Supports managing pages, databases, blocks, relations, rollups, and handling multiple workspaces via aliases.
- Includes detailed command reference for querying, updating, creating, deleting, moving, uploading, and searching Notion content from the terminal.
- Features auto-discovery and aliasing of shared databases for easier access and automation.
- Comprehensive JSON, CSV, table, and YAML output options for different workflows.
- Designed for both human users and AI agent automation.
Metadata
Frequently Asked Questions
What is Notion?
Notion API for creating and managing pages, databases, blocks, relations, rollups, and multi-workspace profiles via the notioncli CLI tool. It is an AI Agent Skill for Claude Code / OpenClaw, with 951 downloads so far.
How do I install Notion?
Run "/install notioncli" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Notion free?
Yes, Notion is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Notion support?
Notion is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Notion?
It is built and maintained by JordanCoin (@jordancoin); the current version is v0.1.0.
More Skills