notion-skill

SUSPICIOUS: the skill’s business purpose is plausible, but its actual footprint is not cleanly aligned with an official Notion integration. It asks the agent to install unofficial third-party CLIs and hand them a Notion token, while presenting this as an official-API workflow and using command examples inconsistent with the cited tooling. No clear attacker endpoint is shown, so this is not confirmed malware, but the install trust and credential-forwarding model make it medium-high risk.