notion
Warn
Audited by Socket on Mar 21, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
The skill is mostly coherent with its stated Notion automation purpose, and the documented data flows point to expected Notion operations rather than obvious third-party interception. The main risk is trust in the undocumented ncli binary/CLI and the forwarding of Notion credentials/tokens to it; without install provenance, this remains suspicious rather than clearly benign.
Confidence: 80%Severity: 58%
Audit Metadata