nby-notion-reading-notes
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlandpython3commands via Bash to interact with the Notion API and parse JSON responses. These are standard operations for a tool designed to integrate with a web service. - [EXTERNAL_DOWNLOADS]: The skill fetches article content from external URLs using the
WebFetchtool (specificallyr.jina.ai) when an article consists primarily of a link. This is the primary purpose of the skill and uses an established service. - [CREDENTIALS_SAFE]: The skill instructs the user to store their Notion API token in a local
.envfile within the skill's directory. This follows standard security practices for secret management and does not hardcode or expose credentials. - [DATA_EXPOSURE]: The skill reads
.envandEXTEND.mdfiles to load configuration and credentials. These operations are scoped to the skill's own configuration directory.
Audit Metadata