notion-knowledge-capture

Warn

Audited by Runlayer on Feb 21, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
16
Flagged
16
Chunks
17
Flagged Files (16)
LICENSE.txtHIGH
78.3%

Malicious tool definition detected

Tool: LICENSE.txt Description: Copyright 2025 Notion Labs, Inc.

SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md Description: --- name: notion-knowledge-capture description: Capture conversations and decisions into structured Notion pages; use when turning chats/notes into wiki entries, how-tos, decisions, or FAQs with proper linking.

agents/openai.yamlHIGH
78.3%

Malicious tool definition detected

Tool: agents/openai.yaml Description: interface: display_name: "Notion Knowledge Capture" short_description: "Capture conversations into structured Notion pages" icon_small: "./assets/notion-small.svg" icon_large: "./assets/notion.png" default_prompt: "Capture this conversation into structured Notion pages with decisions, action items, and owners when known."

evaluations/README.mdHIGH
78.3%

Malicious tool definition detected

Tool: evaluations/README.md Description: # Knowledge Capture Skill Evaluations Evaluation scenarios for testing the Knowledge Capture skill across different Codex models.

evaluations/conversation-to-wiki.jsonHIGH
78.3%

Malicious tool definition detected

Tool: evaluations/conversation-to-wiki.json Description: { "name": "Save Conversation to Wiki", "skills": ["knowledge-capture"], "query": "Save this conversation about deploying our application to production to the team wiki", "context": "Preceding conversation contains discussion about deployment process, including steps, gotchas, and best practices", "expected_behavior": [ "Extracts key information from conversation context (deployment steps, gotchas, best practices)", "Identifies content type

evaluations/decision-record.jsonHIGH
78.3%

Malicious tool definition detected

Tool: evaluations/decision-record.json Description: { "name": "Create Decision Record", "skills": ["knowledge-capture"], "query": "Document our decision to use PostgreSQL instead of MongoDB for our new service", "context": "User has just explained the decision with rationale, options considered, and trade-offs", "expected_behavior": [ "Recognizes this as a decision record (architectural decision) from conversation context", "Uses Decision structure: Context → Decision → Rationale → Options Consi

examples/conversation-to-faq.mdHIGH
78.3%

Malicious tool definition detected

Tool: examples/conversation-to-faq.md [1/2] Description: # Example: Conversation to FAQ ## User Request > "Save this conversation about deployment troubleshooting to the FAQ" **Context**: User just had a conversation explaining how to troubleshoot common deployment errors. ## Conversation Summary The conversation covered: 1.

Tool: examples/conversation-to-faq.md [2/2] Description: problems Most deployment issues can be diagnosed and fixed by reading the logs carefully. ## How to Check Logs ### PM2 ```bash # View all logs pm2 logs # View logs for specific app pm2 logs app-name # View only errors pm2 logs --err # Follow logs in real-time pm2 logs --lines 100 ``` ### Docker ```bash # View logs docker logs container-name # Follow logs docker logs -f container-name # Last 100 lines docker logs --tail 100 container-name #

examples/decision-capture.mdHIGH
78.3%

Malicious tool definition detected

Tool: examples/decision-capture.md Description: # Example: Decision Record Capture **User Request**: "Document our decision to move from REST to GraphQL API" ## Workflow ### 1.

examples/how-to-guide.mdHIGH
78.3%

Malicious tool definition detected

Tool: examples/how-to-guide.md Description: # Example: How-To Guide from Discussion **User Request**: "Save our discussion about deploying to production as a how-to guide" ## Workflow ### 1.

reference/database-best-practices.mdHIGH
78.3%

Malicious tool definition detected

Tool: reference/database-best-practices.md Description: # Database Best Practices General guidance for creating and maintaining knowledge capture databases.

reference/decision-log-database.mdHIGH
78.3%

Malicious tool definition detected

Tool: reference/decision-log-database.md Description: # Decision Log Database (ADR - Architecture Decision Records) **Purpose**: Track important decisions with context and rationale.

reference/documentation-database.mdHIGH
78.3%

Malicious tool definition detected

Tool: reference/documentation-database.md Description: # General Documentation Database **Purpose**: Store all types of documentation in a searchable, organized database.

reference/faq-database.mdHIGH
78.3%

Malicious tool definition detected

Tool: reference/faq-database.md Description: # FAQ Database **Purpose**: Organize frequently asked questions with answers.

reference/how-to-guide-database.mdHIGH
78.3%

Malicious tool definition detected

Tool: reference/how-to-guide-database.md Description: # How-To Guide Database **Purpose**: Procedural documentation for common tasks.

reference/learning-database.mdHIGH
78.3%

Malicious tool definition detected

Tool: reference/learning-database.md Description: # Learning/Post-Mortem Database **Purpose**: Capture learnings from incidents, projects, or experiences.

reference/team-wiki-database.mdHIGH
78.3%

Malicious tool definition detected

Tool: reference/team-wiki-database.md Description: # Team Wiki Database **Purpose**: Centralized team knowledge and resources.

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
16
Files Flagged
16
Chunks Analyzed
17
Analyzed
Feb 21, 2026, 02:50 PM
Security Audit — runlayer — notion-knowledge-capture