notion-onboarding

Warn

Audited by Socket on Mar 24, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill's behavior is broadly consistent with Notion onboarding: it inspects workspace metadata, asks the user to identify key databases, and saves a local mapping file. The main concern is trust and transparency: it depends on an unspecified external `notion` CLI with undocumented install provenance and opaque backend/API behavior. That makes this skill suspicious from a supply-chain and data-flow perspective, but there is no clear evidence of overt credential theft, hidden exfiltration endpoints, or behavior fundamentally incompatible with its stated purpose.

Confidence: 79%Severity: 72%
Audit Metadata
Analyzed At
Mar 24, 2026, 05:47 PM
Package URL
pkg:socket/skills-sh/Balneario-de-Cofrentes%2Fnotion-cli-agent%2Fnotion-onboarding%2F@4269d40717955c3e7a50414636029244af99411c