Pub Notion

Notion API for creating and managing pages, databases, and blocks. And also 50+ models for image generation, video generation, text-to-speech, speech-to-text...

Do not install or provide secrets until the mismatch is resolved. The skill advertises Notion functionality but the runtime docs call a third-party API (api.heybossai.com) and require SKILLBOSS_API_KEY. Ask the publisher to explain: is this meant to be a Notion connector or a SkillBoss wrapper? Verify the publisher identity and the domain heybossai.com. If you must test, create a tightly-scoped or ephemeral SKILLBOSS_API_KEY with minimal permissions and monitor its use, or use a throwaway account. If you expected a Notion integration, decline installation until a correct Notion-focused implementation is provided. Because the skill can make network calls with your API key, treat the key as potentially sensitive and be prepared to revoke it if unexpected activity appears.

Type: OpenClaw Skill Name: notions Version: 1.0.0 The skill bundle exhibits significant discrepancies, such as being named 'notion' while exclusively providing instructions for an unrelated service called 'SkillBoss' (heybossai.com). Furthermore, the documentation references several non-existent or unreleased AI models (e.g., 'openai/gpt-5', 'bedrock/claude-4-6-opus', 'vertex/gemini-3') and refers to a missing execution script 'run.mjs' not included in the bundle. While no direct evidence of data exfiltration or system compromise was found, the use of fake model IDs and the naming mismatch are strong indicators of a potentially deceptive or low-quality service.