notion-agent-memory

• Analyzed: May 12, 2026, 4:09 AM
• Findings: 1
• Version: 1.0.1
• Hash: e53cfa7fc9ddc025d1140a4fe4efbf019e3143eb6beb919aba94f80fc9c1e94e
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to several high-risk capabilities and potential vulnerabilities. Specifically, the `SKILL.md`, `assets/MEMORY-TEMPLATE.md`, `references/act-framework.md`, and `references/notion-integration.md` files instruct the agent to store a Notion API key in `~/.config/notion/api_key` and then use shell commands like `$(cat ~/.config/notion/api_key)` or `$(grep ... | cut ...)` within `curl` calls. This pattern is vulnerable to shell injection if the content of the API key file can be controlled by an attacker. Additionally, the `assets/HEARTBEAT-TEMPLATE.md` file contains an instruction for the agent to 'Use cron jobs for background tasks', which, if interpreted as a direct command, could lead to unauthorized persistence on the system. While these actions are presented within the context of the skill's stated purpose (Notion integration and agent memory management), they represent significant security risks and vulnerabilities rather than clear malicious intent.