notion-md-download-skill
Warn
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions direct the agent to execute shell commands such as
npm installandnpx -y tsxto set up and run the script. The use ofnpx -ybypasses interactive user confirmation for package execution. - [EXTERNAL_DOWNLOADS]: The skill attempts to download dependencies at runtime from
registry.npmmirror.comvianpm installas seen in thepackage-lock.json. This is an external third-party registry mirror. - [DATA_EXFILTRATION]: The skill is designed to handle sensitive data, specifically a Notion API key stored in
~/.config/notion/api_key. The implementation of the credential reading and the network request functions (readNotionApiKey,notionRequest) is hidden in an external file (../../notion-common/notion-api.js) that was not provided for analysis. This lack of transparency prevents verification that the API key and Notion content are only sent to the official Notion API and not exfiltrated to an unauthorized server.
Audit Metadata