← 返回 Skills 市场
devxoul

Vibe Notionbot

作者 Jeon Suyeol · GitHub ↗ · v1.5.0 · MIT-0
cross-platform ⚠ suspicious
761
总下载
0
收藏
0
当前安装
14
版本数
在 OpenClaw 中安装
/install vibe-notionbot
功能描述
Interact with Notion workspaces using official API - manage pages, databases, blocks, users, and comments
安全使用建议
This skill is plausibly a normal Notion CLI, but there are unresolved red flags you should address before installing or granting access: 1) The runtime docs require NOTION_TOKEN (a Notion integration secret) but the skill metadata does not declare it — expect to provide that token; only grant the minimum scopes needed. 2) The npm package provenance is missing (no source or homepage). Before installing, verify the 'vibe-notion' package on the npm registry, inspect its repository and README, and review the package contents (scripts, postinstall hooks) locally or in a sandbox. 3) Be careful with local files: the CLI can upload local markdown/images — do not pass sensitive files. 4) Prefer installing in a controlled environment (container or VM) if you plan to try it, and audit the binary that is produced. 5) If you cannot find a reputable upstream repo or package author, treat the package as untrusted and do not provide your NOTION_TOKEN. If you want, I can list exact checks to perform on the npm package (package.json, repository URL, maintainers, install scripts) or help craft minimal Notion integration permissions to limit risk.
功能分析
Type: OpenClaw Skill Name: vibe-notionbot Version: 1.5.0 The vibe-notionbot skill bundle provides a comprehensive CLI interface for interacting with the Notion API, covering pages, databases, and block management. While the documentation mentions an alternative CLI (vibe-notion) capable of auto-extracting session tokens from the Notion desktop app—a high-risk credential access behavior—it is presented as a documented 'zero setup' feature for the user. The instructions in SKILL.md are well-structured and include security-conscious guidance, such as directing the AI agent to strip PII before filing feature requests and using the CLI wrapper to avoid accidental credential exposure in logs. No evidence of malicious intent, unauthorized data exfiltration, or harmful prompt injection was found.
能力评估
Purpose & Capability
The skill's name and description match the instructions: it is a CLI wrapper for the official Notion API and exposes many Notion operations. Requiring a CLI binary (vibe-notionbot) and offering page/database/block commands is coherent with the purpose.
Instruction Scope
The SKILL.md instructs runtime use of the vibe-notionbot CLI and describes reading local files (e.g., --markdown-file, auto-uploading local images) and using an Integration token via NOTION_TOKEN. However the skill forbids calling the Notion API directly and forbids writing scripts — these are policy-like constraints that limit alternatives but are not themselves harmful. Crucially, the runtime instructions rely on an environment variable (NOTION_TOKEN) and local files, yet the skill metadata does not declare this env var or any required config paths, creating an incoherence between what the instructions expect and what the metadata promises.
Install Mechanism
The install spec is a Node (npm) package: 'vibe-notion' which installs the 'vibe-notionbot' binary. Installing an npm package is common for a CLI, but the skill metadata has no source/homepage and the registry metadata lists 'Source: unknown' and no homepage — lack of provenance increases risk because the package contents and repository can't be reviewed from the skill metadata alone.
Credentials
The tool requires an integration token (NOTION_TOKEN) to operate according to SKILL.md, but requires.env is empty and no primaryEnv is declared. This omission is a mismatch: the skill will need a secret (NOTION_TOKEN) to function, yet it does not declare it. Requesting a Notion integration token would be proportionate to the stated purpose, but the omission reduces transparency and could hide required privileges.
Persistence & Privilege
The skill does not request always:true, does not require system config paths, and is user-invocable only. No unusual persistence or elevated platform privileges are requested.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install vibe-notionbot
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /vibe-notionbot 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.5.0
v1.5.0 is a documentation update. - Updated SKILL.md to reflect current features and usage for vibe-notionbot. - No changes to the CLI tool itself; commands and usage are unchanged. - Clarifies best practices, supported commands, and skill limitations.
v1.4.0
v1.4.0 - Updated version number to 1.4.0 in SKILL.md. - No other changes to functionality or documentation.
v1.3.1
- Bumped version number to 1.3.1 in SKILL.md. - No feature changes or command updates; documentation only change.
v1.3.0
v1.3.0 - Updated SKILL.md version to 1.3.0. - No other functional or documentation changes included in this update.
v1.2.2
v1.2.2 is a documentation-only update. - Updated the SKILL.md file to reflect the new version (1.2.2). - No changes to functionality or commands; documentation only.
v1.2.1
v1.2.1 is a minor update with documentation changes only. - Updated SKILL.md version to 1.2.1. - No changes to commands or functionality—only documentation updated.
v1.2.0
Version 1.2.0 - Updated documentation for the `database update` command to include examples that specify the `--properties` flag. - Added more comprehensive usage examples for updating database schema and properties. - Clarified the use of the `--title` and `--properties` flags in the `database update` command. - No changes to implementation or functionality; documentation only.
v0.9.0
v0.9.0 is a documentation update. - Updated SKILL.md to reflect version 0.9.0. - No CLI commands or feature changes; instructions and examples remain the same.
v0.8.1
- Bumped version to 0.8.1 in SKILL.md. - No other content or feature changes included.
v0.8.0
v0.8.0 adds advanced markdown and block features. - Added support for uploading local images in markdown files (auto-uploaded/embed when creating/updating pages and blocks) - New options to append markdown with nested lists as indented child blocks - Added ability to append or insert blocks before/after specific blocks using --after and --before - Introduced block file upload: upload images or files as image/file blocks with block upload command - Updated documentation to include all new CLI options and examples
v0.6.0
Version 0.6.0 - Updated documentation in SKILL.md. - Version number incremented to 0.6.0. - No functional or CLI command changes listed; update is documentation-focused.
v0.5.3
- Added a new section explaining the difference between the two CLIs: `vibe-notion` (unofficial API) and `vibe-notionbot` (official API), including a decision flow table to guide users on which to use. - Clarified usage recommendations based on authentication method and available features. - No changes to CLI commands or API coverage; documentation update only. - Incremented version to 0.5.3 to reflect documentation improvements.
v0.5.2
- Updated version to 0.5.2 in SKILL.md. - No other changes to commands or functionality documented.
v0.5.1
v0.5.1 - Improved documentation and usage guidance in SKILL.md. - Expanded examples and clarified best practices for CLI usage. - Added strict instructions to avoid direct API calls and scripting; emphasized use of CLI batch for bulk operations. - Included detailed command references and usage for pages, databases, blocks, users, comments, and batch actions.
元数据
Slug vibe-notionbot
版本 1.5.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 14
常见问题

Vibe Notionbot 是什么?

Interact with Notion workspaces using official API - manage pages, databases, blocks, users, and comments. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 761 次。

如何安装 Vibe Notionbot?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install vibe-notionbot」即可一键安装,无需额外配置。

Vibe Notionbot 是免费的吗?

是的,Vibe Notionbot 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Vibe Notionbot 支持哪些平台?

Vibe Notionbot 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Vibe Notionbot?

由 Jeon Suyeol(@devxoul)开发并维护,当前版本 v1.5.0。

💬 留言讨论