Synergy Salon

Manage Synergy salon — appointments, clients, social media, promotions, and website. Notion-powered scheduling and CRM.

Security Scan

The skill's behavior (reading/updating Notion, committing/deploying a website) matches its description, but the SKILL.md declares network and filesystem permissions without declaring how credentials are provided — the registry metadata lists no required environment variables or install steps, which is inconsistent and worth investigating before installing.

Purpose & Capability

The stated purpose (manage appointments, clients, promos, and the website via Notion and site deployment) aligns with the actions described in SKILL.md: accessing Notion databases, editing files in ~/synergy-website, running git/npm/netlify, and calling api.notion.com and api.netlify.com. However, the registry metadata lists no required environment variables or primary credential even though Notion and Netlify APIs and git pushes normally require credentials — this mismatch is unexplained.

Instruction Scope

Instructions are scoped to salon operations and website repo edits: read/write specific Notion databases, mark ReminderSent, create promo drafts, edit files under ~/synergy-website, commit changes, and optionally deploy. The instructions do not ask for other system data, but they do grant file access to a home-directory path and command execution rights (git, npm, netlify) which allow modifying and pushing site code — this is within the feature set but broad in consequence and should be limited to the actual website directory and to explicit deploy approval (the skill notes deploy requires approval).

Install Mechanism

There is no install spec and no code files — the skill is instruction-only, so nothing is written to disk by an installer. This minimizes installation risk.

Credentials

The skill will need API credentials (Notion API key/token, Netlify auth token, and git push credentials or SSH key) to function, but the registry shows no required environment variables or primary credential. That omission is disproportionate and suspicious because it hides where secrets must be provided/stored and how the agent will access them. Expect to need variables like NOTION_TOKEN/NOTION_API_KEY, NETLIFY_AUTH_TOKEN (or equivalent), and git credentials (SSH key or GITHUB_TOKEN); their absence from metadata is a red flag.

Persistence & Privilege

The skill is not always-enabled (always:false) and is user-invocable. It requests file and network permissions in SKILL.md which allow it to modify and deploy website code when invoked; autonomous invocation is allowed by default for skills, but there's no evidence this skill attempts to gain permanent elevated privileges or to change other skills' configs. Because it can commit and (with approval) deploy code, users should limit its file access to the intended website directory.

What to consider before installing

Before installing, confirm where and how the skill will obtain credentials: Notion and Netlify both require API tokens and git pushes require credentials (SSH key or token). The registry metadata lists no required env vars — ask the skill author or inspect the source to see how auth is handled. Verify the skill's file access is restricted to only ~/synergy-website (or set a narrower path) and that deploys require explicit approval. Review the referenced GitHub repository (homepage) and the SKILL.md there to ensure there are no hidden steps. If you proceed, supply least-privilege tokens (scoped Netlify token, Notion integration limited to necessary DBs, a deploy key with only repo write access) and test in a staging site/repo first. If you cannot verify where secrets are stored or how deploys are authorized, do not install.

Synergy Salon — Operations

Manage Synergy salon from your phone. Book appointments, manage clients, create social media content, and update the website.

Commands

salon schedule [day]

Show appointments for a specific day. Defaults to today.

salon schedule today
salon schedule tomorrow
salon schedule friday
salon schedule march 15

Reads from: Notion "Salon Appointments" database, filtered by date.

salon book [client] [service] [time]

Book a new appointment. Creates entry in Notion with Status="Confirmed".

salon book Sarah Jones haircut 2pm Thursday
salon book Mike Chen color 10am March 15

If the client doesn't exist in Salon Clients, creates a new client entry and asks for phone/email.

Services: Haircut, Color, Style, Blowout, Nails, Facial, Wax

salon reschedule [client] [new-time]

Reschedule an existing appointment. Updates the Notion entry.

salon reschedule Sarah Jones 4pm Friday

Finds the client's next upcoming appointment and updates it.

salon cancel [client]

Cancel an appointment. Sets Status="Cancelled" in Notion.

salon cancel Sarah Jones

salon remind

List clients with appointments today or tomorrow who haven't been reminded.

salon remind

Shows client names, services, times, and phone numbers. Marks "ReminderSent" checkbox after confirming reminders were sent.

salon promo [type]

Generate a social media promotional post. Saves draft to Notion "Salon Promos" database.

salon promo valentines special
salon promo new client discount 20% off first visit
salon promo summer hair trends
salon promo holiday gift cards

Generates platform-appropriate content with relevant hashtags.

salon post [content]

Create and schedule a social media post. Saves to Notion "Salon Promos" database.

salon post Instagram: Summer vibes start with the perfect cut! Book today.
salon post Facebook: New balayage service now available - starting at $150

salon site update [page] [content]

Update the Synergy salon website content.

salon site update services Add balayage starting at $150
salon site update hours Update Saturday hours to 9am-5pm
salon site update gallery Add new portfolio images

Modifies files in ~/synergy-website/, commits, and offers to deploy.

salon site deploy

Deploy the website. Requires approval. Delegates to site-deployer skill.

salon site deploy

salon clients [search]

Search client database in Notion.

salon clients Sarah
salon clients all
salon clients recent

Returns: Name, phone, email, preferences, last visit, total visits.

salon revenue [period]

Financial summary for the salon.

salon revenue this week
salon revenue march
salon revenue this year

Reads from: Notion "Financial Tracking" database filtered to Synergy source.

Notion Databases

• Salon Appointments — Booking management with service types and status
• Salon Clients — Client CRM with contact info and preferences
• Salon Promos — Social media content calendar
• Financial Tracking — Revenue tracking (filtered to Synergy source)