Notion API Tools
v1.1.0Generic Notion API CLI (Node) for search, querying data sources (databases), and creating pages. Configure with NOTION_KEY (or ~/.config/notion/api_key).
⭐ 5· 4.6k·20 current·21 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description match the included script: it implements search, database queries, page creation, and block operations against api.notion.com. The endpoints and operations used are consistent with a Notion API CLI.
Instruction Scope
SKILL.md directs running the included Node script and supplying a NOTION_KEY or key file. The runtime only reads the key, builds JSON requests to Notion, and prints JSON to stdout. It does not instruct reading unrelated system files or sending data to other endpoints.
Install Mechanism
No install spec; this is instruction-only with a bundled script. Nothing is downloaded from external URLs and no archives are extracted. The script relies on a Node runtime (fetch/global available) but no installer is invoked.
Credentials
The skill requires a Notion integration token (NOTION_KEY or key file) and optionally NOTION_KEY_FILE/NOTION_VERSION, but the declared registry metadata lists no required env vars or primary credential. That metadata omission is an incoherence and should be clarified before trusting the skill.
Persistence & Privilege
The skill does not request permanent/always inclusion, does not modify other skills or system settings, and only needs access to the user's Notion token and their home config file path. Autonomous invocation is allowed (platform default) but not combined with other red flags.
Assessment
This skill appears to be what it claims: a small Node CLI for the Notion API that will use the NOTION_KEY env var or ~/.config/notion/api_key. Before installing, confirm you trust the skill source (source/homepage unknown) and be aware it needs a Notion integration token with whatever scopes you allow. The registry metadata did not list NOTION_KEY as a required credential — treat that as an oversight and only provide a token with the minimum scopes (read/write only the pages/databases you want the skill to access). If you are uneasy, open and inspect scripts/notion-api.mjs locally (it is small and readable) or run it in a restricted environment. If you use it with an unattended agent, ensure the token has limited permissions and only grant access to the intended databases/pages.Like a lobster shell, security has layers — review code before you run it.
WRWCvk97e77hq4my4av8nad7aex38hn801jfclatestvk97e77hq4my4av8nad7aex38hn801jfctimenotspacevk97e77hq4my4av8nad7aex38hn801jfc
License
MIT-0
Free to use, modify, and redistribute. No attribution required.