notion

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The stated Notion-management purpose is plausible, but the implementation relies on a third-party `orth` CLI and Orthogonal-hosted OAuth/API mediation instead of direct official Notion endpoints. The missing installer provenance plus credential/data routing through an intermediary makes the skill high risk for credential forwarding and workspace data exposure.

Confidence: 87%Severity: 84%
Audit Metadata
Analyzed At
Mar 29, 2026, 06:00 PM
Package URL
pkg:socket/skills-sh/orthogonal-sh%2Fskills%2Fnotion%2F@60a92e2cd9e697a9d05de8116dcc561607ac6b7b