notion

SUSPICIOUS: The core Notion purpose is coherent, and the official Notion MCP endpoint fits the stated use. However, the skill's required local executable appears inconsistent with Notion's documented official CLI, and the Muse relay/authd path adds an intermediary credential flow that is not clearly verified from the skill itself. This looks more like a trust/provenance problem than confirmed malicious behavior.