agent-notion

SUSPICIOUS. The functional scope matches a Notion automation skill, but trust hinges on an unverifiable `agent-notion` binary that receives high-value credentials and browser/desktop sessions. That combination is disproportionate from an install-trust perspective and triggers a high security classification even without proof of active malware.