Getnote Daily Sync

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:18 PM UTC
• Version:
  1.0.0

Overview

This skill is a disclosed Get笔记-to-Notion daily sync that uses sensitive note data, but its access and Notion writes match its stated purpose.

Install only if you are comfortable copying today's Get笔记 content into the selected Notion database. Use a Notion integration limited to the intended database, verify the database ID, protect the API tokens, and enable the Cron schedule only if daily automatic syncing is desired.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 92% confidence
• Finding: The skill will send potentially sensitive note content, recordings, meeting summaries, and todos to external services and create new records in Notion, but the description does not clearly warn users about this data transfer and write action. This can lead to unintentional disclosure of confidential information or unintended modification of a workspace if users trigger the skill without understanding its effects.

VirusTotal

64/64 vendors flagged this skill as clean.