Notion Integration
v0.1.0Notion integration - Manage pages, databases, and content in Notion
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, SKILL.md, claw.json, and notion.py all align: the skill implements Notion API operations (create page, query database, search) and only requests NOTION_API_KEY which is appropriate for this purpose.
Instruction Scope
Runtime instructions only require setting NOTION_API_KEY and sharing pages/databases with the integration. The included code only reads that env var and makes requests to api.notion.com; it does not read unrelated files, other env vars, or send data to external endpoints outside Notion.
Install Mechanism
There is no install spec (instruction-only), so nothing is written to disk by an installer. However the Python code depends on the 'requests' library but the skill does not declare or install that dependency, which may cause runtime failures or require the host to provide the package.
Credentials
Only NOTION_API_KEY is required. That is expected for this integration; no unrelated secrets or system config paths are requested. Reminder: the token grants whatever scopes the integration was given, so follow least-privilege practices.
Persistence & Privilege
Skill is not always-enabled and does not request elevated agent/system persistence. It creates an in-process client object but does not modify other skills or system-wide settings.
Assessment
This skill appears to do what it says: it uses your NOTION_API_KEY to call the Notion API (api.notion.com). Before installing: (1) ensure you provide an Integration token with only the permissions you intend (share only the pages/databases the integration needs), (2) be prepared to install the Python 'requests' dependency in the runtime environment, (3) review the included notion.py if you want to confirm exact behavior (it performs create/query/search operations), and (4) rotate or revoke the token if you later stop using the skill. Note: the code has minor implementation bugs (payload/parent handling and missing dependency declaration) that affect functionality but are not indicative of malicious behavior.Like a lobster shell, security has layers — review code before you run it.
Runtime requirements
EnvNOTION_API_KEY
latest
Notion Integration
Notion integration skill for OpenClaw. Manage pages, databases, and content in Notion.
Capabilities
- Create new pages
- Query databases
- Update page content
- Search pages
- Create database entries
Setup
- Create an integration at https://www.notion.so/my-integrations
- Get the Internal Integration Token
- Share pages/databases with the integration
- Configure NOTION_API_KEY environment variable
Environment Variables
| Variable | Required | Description |
|---|---|---|
NOTION_API_KEY | Yes | Your Notion API Key (secret_xxx) |
Comments
Loading comments...
