Notion

PassAudited by ClawScan on May 3, 2026.

Overview

This appears to be a legitimate Notion integration, but installing it means trusting ClawLink with OAuth-based Notion access and reviewing any proposed workspace changes.

Before installing, verify the ClawLink plugin/source, review the Notion OAuth permissions, connect only the workspace/pages you intend to expose, and approve write previews only when they match your request.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may be able to create or update Notion content after confirmation, so mistakes could affect workspace data.

Why it was flagged

The skill enables Notion write operations through ClawLink tools, but it also requires preview and user confirmation, making the behavior disclosed and purpose-aligned.

Skill content
For writes or anything marked as requiring confirmation, call `clawlink_preview_tool` first, then confirm with the user. Execute with `clawlink_call_tool`.
Recommendation

Review previews carefully before approving Notion writes, especially bulk, destructive, or externally visible changes.

What this means

ClawLink and the connected tools may access or modify Notion data within the permissions the user approves.

Why it was flagged

The skill requires delegated OAuth access to the user's Notion account through ClawLink, which is expected for this integration but grants account-level authority according to the approved scopes.

Skill content
ClawLink's hosted page runs the Notion OAuth flow — the user clicks through the Notion login and authorization screen.
Recommendation

Approve only the Notion permissions you are comfortable granting, verify the ClawLink connection page, and revoke access when it is no longer needed.

What this means

The actual Notion tool execution depends on an external plugin and service outside the instruction-only skill.

Why it was flagged

The skill depends on a separate ClawLink plugin that is not included in this artifact set. The install is user-directed and purpose-aligned, but users should verify the dependency.

Skill content
Install the verified ClawLink plugin: `openclaw plugins install clawhub:clawlink-plugin`
Recommendation

Install the plugin only from the expected ClawHub source and check ClawLink's verification or source information before pairing accounts.

What this means

Requests and Notion-related data may pass through ClawLink as part of the integration flow.

Why it was flagged

Tool discovery and execution are mediated by the external ClawLink gateway rather than fixed local code, so Notion operations and related data depend on ClawLink's dynamic tool catalog.

Skill content
ClawLink provides tools dynamically based on what the user has connected. You do not need to know tool names or schemas in advance.
Recommendation

Use this skill only if you trust ClawLink to mediate Notion access, and avoid approving access to workspaces or pages that should not be available through the integration.