notion-cli

SUSPICIOUS. The skill’s purpose is legitimate and its data flows target official Notion endpoints, but the install instructions are internally inconsistent with the declared publisher: it tells users to install a different maintainer’s CLI and then pass a Notion token to it. That mismatch, plus plaintext token-file handling, creates medium supply-chain and credential-trust risk without enough evidence for confirmed malware.