Notion

Notion API for creating and managing pages, databases, blocks, relations, rollups, and multi-workspace profiles via the notioncli CLI tool.

This appears to be a legitimate Notion CLI skill, but verify a few things before installing: 1) Confirm the npm package author (@jordancoin) and review the package source (the GitHub repo) to ensure it's the expected code. 2) Check where 'notion init' stores your NOTION_API_KEY and whether it's encrypted or stored plaintext; prefer storing keys in a secure vault. 3) Limit the API key's scopes to only the databases/workspaces needed. 4) Because the registry metadata contradicts the SKILL.md (env/install omissions) and an install.sh is present, prefer installing in a controlled environment or inspect the install.sh contents first. If you are not comfortable inspecting code, avoid global npm installs from unverified publishers.

Type: OpenClaw Skill Name: notioncli Version: 0.1.0 The skill installs `notioncli`, a legitimate tool for interacting with the Notion API. While the `SKILL.md` and `install.sh` do not contain any direct malicious instructions or prompt injection attempts, the `notion upload` command (documented in SKILL.md) grants the AI agent the capability to read arbitrary local files (e.g., `notion upload <page-id> ./screenshot.png`). This local file access, even if intended for legitimate uploads to Notion, represents a high-risk capability and broad permission that could be exploited by a malicious prompt to exfiltrate sensitive local files, classifying it as suspicious rather than benign.