Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward Notion documentation helper, but users should treat captured conversations as data that will be stored in Notion.
Install only if you intend to send selected conversation notes or transcripts to Notion. Use a least-privilege Notion integration token, verify the target database/workspace, and avoid using it with secrets, regulated data, or confidential conversations unless you are authorized to store that content in Notion.
The skill requests a Notion API token and references a third-party integration, but it provides no guidance on secure credential handling or the privacy implications of sending captured content to Notion. This increases the risk of token exposure, overbroad permissions, and unintentional transmission of sensitive data to an external service.
The skill explicitly describes creating or updating Notion documents from conversation content, but it does not clearly warn users that their input will be transmitted to and persisted in a third-party workspace. This can lead to accidental disclosure of sensitive meeting notes, transcripts, or personal data when users assume the transformation is local or read-only.
No suspicious patterns detected.
