agent-notion

SUSPICIOUS: the skill’s capabilities largely match its stated Notion automation purpose, and the documented data flow appears aimed at Notion rather than a third-party proxy. However, it depends on a non-official external CLI, handles high-value Notion credentials and imported browser/desktop sessions, and enables broad read/write/export actions, so the trust and scope are moderately high-risk for an agent skill.