notion
Warn
Audited by Socket on Mar 29, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The stated Notion-management purpose is plausible, but the implementation relies on a third-party `orth` CLI and Orthogonal-hosted OAuth/API mediation instead of direct official Notion endpoints. The missing installer provenance plus credential/data routing through an intermediary makes the skill high risk for credential forwarding and workspace data exposure.
Confidence: 87%Severity: 84%
Audit Metadata