Notion

Work with Notion pages and databases via the official Notion API.

Security Scan

The skill is internally consistent: it documents using the official Notion API via a local CLI and only asks for a Notion integration token (NOTION_API_KEY); nothing requested or instructed is disproportionate to that purpose.

Purpose & Capability

Name and description match the declared requirement (NOTION_API_KEY) and the SKILL.md. The skill is declarative and expects a local 'notion-cli' to perform API calls — this aligns with the stated purpose of working with Notion pages and databases.

Instruction Scope

Instructions stay on-topic (reading/creating pages and querying/updating databases via a local CLI). Minor inconsistency: SKILL.md references an additional env var NOTION_PROFILE (for selecting profiles) but NOTION_PROFILE is not listed in the required env metadata. The skill does not instruct the agent to read unrelated system files or send data to unexpected endpoints.

Install Mechanism

This is an instruction-only skill with no install spec or code files, so nothing will be written to disk by the skill bundle itself. The README/SKILL.md recommends installing an external CLI ('notion-cli' or 'notion-cli-py'); verify the provenance of that third-party tool before installing.

Credentials

Only NOTION_API_KEY is declared as required, which is appropriate and proportionate for Notion API access. The SKILL.md also mentions NOTION_PROFILE (not declared) as a way to switch contexts. The requested token is sensitive — users should provide a token with least privilege and share the integration only with pages/databases the skill should access.

Persistence & Privilege

always is false and the skill is user-invocable; it requests no persistent presence or system-wide configuration. Model invocation is allowed (normal) but not exceptional for this skill.

Assessment

This skill is a documentation-only wrapper that expects a local Notion CLI and a Notion integration token. Before installing or using it: (1) create a dedicated Notion integration with the minimal scopes you need and only share the integration with the specific pages/databases the agent should access; (2) store the token in a secure place and avoid exposing a broad-scoped or personal account token; (3) verify the provenance and safety of any 'notion-cli' or 'notion-cli-py' you install (use official repositories/releases); (4) be aware SKILL.md mentions NOTION_PROFILE (an extra env var) — if you use profiles, confirm how your environment will be selected; (5) rotate tokens periodically and revoke the integration when no longer needed. With those precautions, the skill appears coherent with its stated purpose.

This skill lets the agent work with Notion pages and databases using the official Notion API.

The skill is declarative: it documents safe, recommended operations and assumes a local CLI (notion-cli) that actually performs API calls.

Authentication

• Create a Notion Integration at https://www.notion.so/my-integrations
• Copy the Internal Integration Token.
• Export it as:

export NOTION_API_KEY=secret_xxx

Share the integration with the pages or databases you want to access. Unshared content is invisible to the API.

Profiles (personal / work)

You may define multiple profiles (e.g. personal, work) via env or config.

Default profile: personal

Override via:

export NOTION_PROFILE=work

Pages

Read page:

notion-cli page get <page_id>

Append blocks:

notion-cli block append <page_id> --markdown "..."

Prefer appending over rewriting content.

Create page:

notion-cli page create --parent <page_id> --title "..."

Databases

Inspect schema:

notion-cli db get <database_id>

Query database:

notion-cli db query <database_id> --filter <json> --sort <json>

Create row:

notion-cli page create --database <database_id> --props <json>

Update row:

notion-cli page update <page_id> --props <json>

Schema changes (advanced)

Always inspect diffs before applying schema changes.

Never modify database schema without explicit confirmation.

Recommended flow:

notion-cli db schema diff <database_id> --desired <json>
notion-cli db schema apply <database_id> --desired <json>

Safety notes

• Notion API is rate-limited; batch carefully.
• Prefer append and updates over destructive operations.
• IDs are opaque; store them explicitly, do not infer from URLs.