notion-artifact-capture

SUSPICIOUS. The skill's Notion credential use, file access, and API data flows are proportionate to its stated purpose, and it routes writes to official Notion endpoints rather than a proxy. The main risk is install trust: it is a community-published skill loaded from raw GitHub and companion scripts are obtained by cloning a third-party repo, which is materially weaker than official package or signed release channels, but not fundamentally incompatible with the claimed purpose.