pp-notion

SUSPICIOUS. The skill’s capabilities mostly match its stated Notion-management purpose, and the install path appears same-publisher rather than an unrelated payload. However, it requires trusting a third-party CLI with Notion credentials, uses unpinned install paths, and includes optional arbitrary webhook delivery that can exfiltrate workspace data if invoked. Data flows are mostly coherent, but the credential forwarding and external binary trust make this medium risk rather than benign.