mmk-youtube-channel-summary

SUSPICIOUS rather than malicious. The workflow matches its stated YouTube-to-Notion purpose and uses first-party YouTube RSS, but it relies on an unverifiable mmk CLI that likely receives Notion credentials and performs side-effecting writes automatically. The main risk is opaque credential-capable binary trust, not clear evidence of exfiltration.