Korta Notion
v1.0.0Notion API for creating and managing pages, databases, and blocks.
⭐ 0· 28·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description describe Notion API usage and the instructions only require a Notion integration key and calls to api.notion.com — those requirements are proportional to the described functionality.
Instruction Scope
SKILL.md instructs the agent/user to read a local file (~/.config/notion/api_key) and to call Notion endpoints only; it does not ask to read other system files or send data to third-party endpoints. This stays within the Notion-integration scope, but the skill references a config path while the registry metadata declared no config paths.
Install Mechanism
No install spec or code files are present (instruction-only). Nothing is downloaded or written by an installer, which minimizes risk.
Credentials
The skill requires a Notion API key (the SKILL.md instructs storing it in ~/.config/notion/api_key) — this is appropriate for a Notion integration. However, the registry metadata lists no required env vars or config paths, so the runtime credential location isn't declared in the manifest (inconsistency to be aware of).
Persistence & Privilege
The skill does not request always:true, does not install persistent components, and does not modify other skills or system-wide settings.
Assessment
This skill appears to be what it says: a Notion API cookbook using a local API key file and curl to call api.notion.com. Before installing: (1) verify the skill source/owner (the embedded _meta.json ownerId/slug differ from the registry metadata here), (2) prefer storing secrets in your platform's secret store or ensure ~/.config/notion/api_key is created with restrictive permissions (chmod 600) rather than world-readable, (3) when creating the Notion integration grant it only the pages/databases it needs, and (4) avoid pasting your key into untrusted places. The main issues are metadata/config inconsistencies (owner/slug and missing declared config path) — confirm the publisher and origin before granting access to your Notion data.Like a lobster shell, security has layers — review code before you run it.
latestvk976396rrkkvfh0ram9c54wsy184fqtf
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📝 Clawdis