notion

SUSPICIOUS: The skill’s purpose and commands are coherent for Notion management, and data flows appear aimed at official Notion services rather than an obvious proxy. However, it depends entirely on a third-party GitHub CLI installed from unpinned mutable source and then forwards Notion OAuth/API credentials to that CLI, creating medium-high install-trust and credential-handling risk disproportionate to an otherwise straightforward integration.