skills/makenotion/skills/notion-cli/Gen Agent Trust Hub

notion-cli

Fail

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The SKILL.md file contains an installation instruction curl -fsSL https://ntn.dev | bash that fetches a remote script and immediately executes it via the shell. Piping unverified code from external domains directly into a shell interpreter poses a significant remote code execution risk.
  • [COMMAND_EXECUTION]: The command pipeline executes arbitrary code on the local system without intermediate validation or user confirmation safeguards.
  • [EXTERNAL_DOWNLOADS]: The skill initiates network connections to download executable content from https://ntn.dev, which falls outside verified or officially established infrastructure channels.
Recommendations
  • HIGH: Downloads and executes remote code from: https://ntn.dev - DO NOT USE without thorough review
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 14, 2026, 08:20 PM
Security Audit — agent-trust-hub — notion-cli