skills/steipete/clawdis/notcrawl/Gen Agent Trust Hub

notcrawl

Pass

Audited by Gen Agent Trust Hub on Jun 14, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs a third-party command-line tool named 'notcrawl' from the GitHub repository 'github.com/vincentkoc/notcrawl' using the Go toolchain.
  • [COMMAND_EXECUTION]: The skill executes various subcommands of the 'notcrawl' binary, including 'doctor', 'status', 'sync', 'search', and 'sql', to manage and query local Notion data archives.
  • [CREDENTIALS_UNSAFE]: The skill instructions mention that API synchronization requires a 'NOTION_TOKEN' environment variable. However, it does not hardcode any credentials or provide instructions to store them insecurely.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 14, 2026, 01:10 PM
Security Audit — agent-trust-hub — notcrawl