Notion to Markdown

• Analyzed: May 14, 2026, 4:47 AM
• Findings: 1
• Version: 1.0.1
• Hash: ea5b389f2293cd095adcc0484f019005b0cf1c1a6d3e14938abcd0d007957ac0
• Source: palm
• External report: View on VirusTotal

Findings (1)

```json { "classification": "benign", "summary": "The OpenClaw skill bundle is benign. The `SKILL.md` and `references/notion-api-setup.md` provide clear, transparent instructions and security best practices, with no evidence of prompt injection attempts. The `scripts/convert.js` code uses official Notion API clients (`@notionhq/client`, `notion-to-md`) and standard Node.js modules (`fs`, `path`, `dotenv`). It securely handles API keys via environment variables and implements robust sanitization for filenames (`pageTitle.replace(/[^\w\\s-]/g, \"\")`) and path joining (`path.join`) when writing markdown files, preventing path traversal vulnerabilities. No unauthorized network calls, data exfiltration, or persistence mechanisms were detected." } ```