notion-skills-usage

SUSPICIOUS: the core Notion skill-management purpose mostly matches its capabilities, and the named CLIs appear to be legitimate official tools. Risk comes from transitive installation of third-party skills from GitHub, agent-initiated feedback posting, and reliance on external skill content from Notion/GitHub that can influence future agent behavior. This looks like a real but medium-risk skill ecosystem manager, not confirmed malware.