AutomateLab agency-os

• Analyzed: May 13, 2026, 10:46 AM
• Findings: 1
• Version: 1.0.0
• Hash: e3c601431b5e9d04c6f61e6cc43d5ddedf803dc326d4efc24120e826f193439e
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle implements a Notion-based task management system ('agency-os') that requires high-privilege operations, including shell execution and direct credential handling. The SKILL.md instructions and the 'run' command require the agent to execute a bundled Python script (scripts/query-tasks.py) via Bash to bypass limitations in the standard Notion MCP. This script accesses the NOTION_KEY environment variable and performs external network requests to api.notion.com. While these behaviors are aligned with the stated purpose of the tool, the reliance on custom script execution and direct API interaction outside the MCP framework constitutes a high-risk capability and an expanded attack surface.