Notion Agent
v1.0.1Notion integration for OpenClaw. Manage pages, databases, and blocks via AI agent.
⭐ 0· 262·0 current·0 all-time
byChloe Park@chloepark85
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, required binary (uv), primary credential (NOTION_TOKEN), and the included Python CLI and library files all align with a Notion API integration. The code calls api.notion.com and implements pages, databases, blocks, and search as described.
Instruction Scope
SKILL.md instructs the agent to run the bundled CLI via 'uv' and to set NOTION_TOKEN. It does not instruct reading unrelated system files, other credentials, or exfiltrating data to non-Notion endpoints. Error messages and usage are narrowly scoped to Notion operations.
Install Mechanism
There is no automatic install spec (instruction-only), which minimizes installation risk. The package includes source code and a pyproject listing 'requests' only. The README suggests installing 'uv' via a curl command; that is a separate user action and should be treated as normal operational advice rather than an automatic installer embedded in the skill.
Credentials
Only the Notion integration token (NOTION_TOKEN) is required as the primary credential. No unrelated secrets, config paths, or broad environment access are requested. This is proportionate to the described functionality.
Persistence & Privilege
The skill does not request permanent/always-on inclusion and does not modify other skills or system-wide settings. Autonomous invocation is allowed by default (normal for skills) but not combined with broad privileges here.
Assessment
This skill appears coherent, but before installing: (1) Treat your NOTION_TOKEN as a secret — create a Notion 'Internal Integration' with minimal access and only share the specific pages/databases the integration needs. (2) Review the included scripts yourself (they are small and human-readable) and confirm API calls target https://api.notion.com. (3) The README suggests installing 'uv' via a curl | sh command; prefer installing 'uv' from a trusted source or review the install script before running it. (4) Rotate the token if it may be exposed, and avoid pasting tokens into chats or public repos. (5) If you plan to allow autonomous agent actions, be aware the agent (with this skill) can perform Notion operations with whatever access the token grants — limit the integration scope accordingly.Like a lobster shell, security has layers — review code before you run it.
latestvk977a8xg8shsyxrnqwd3r23xzh82m52s
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📝 Clawdis
Binsuv
Primary envNOTION_TOKEN
