banana-sync-to-notion

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [SAFE]: The skill provides a synchronization utility for Notion. It manages the Notion API token using a .env file, which is a standard and recommended practice for protecting credentials in automation tools.\n- [EXTERNAL_DOWNLOADS]: The skill declares dependencies on the official @notionhq/client and dotenv packages from the NPM registry to facilitate API communication and environment management.\n- [COMMAND_EXECUTION]: The skill uses Node.js scripts (sync-notion.js and clean-notion.js) to perform its tasks. These are executed through standard NPM lifecycle scripts as documented in the package.json file.\n- [DATA_EXFILTRATION]: The skill reads local Markdown and text files from a project directory and uploads them to api.notion.com. As this is the core documented purpose of the skill and targets a well-known service domain, it is considered an intended and safe operation.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 11:36 AM