notion

Warn

Audited by Socket on Mar 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

The skill is mostly coherent with its stated Notion automation purpose, and the documented data flows point to expected Notion operations rather than obvious third-party interception. The main risk is trust in the undocumented ncli binary/CLI and the forwarding of Notion credentials/tokens to it; without install provenance, this remains suspicious rather than clearly benign.

Confidence: 80%Severity: 58%
Audit Metadata
Analyzed At
Mar 21, 2026, 09:18 AM
Package URL
pkg:socket/skills-sh/nyosegawa%2Fnotion-cli%2Fnotion%2F@731f06545d3f79185d7e1771e69439978d6e7510
Security Audit — socket — notion