Notion 1.0.0

• Analyzed: May 11, 2026, 4:43 AM
• Findings: 1
• Version: 1.0.0
• Hash: 57a8bf52d8eb7a64f39cc7c897d3ed370308660f34a48a881922b1bf78a57f8b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw skill bundle for Notion API is benign. It provides instructions for setting up and interacting with the official Notion API, including storing and retrieving an API key from `~/.config/notion/api_key` and making `curl` requests to `https://api.notion.com`. There is no evidence of malicious intent such as data exfiltration to unauthorized endpoints, arbitrary code execution, persistence mechanisms, or prompt injection attempts designed to subvert the agent's core function or steal unrelated data. All instructions and code snippets in `SKILL.md` are directly related to the stated purpose of managing Notion pages, databases, and blocks.