Notion Time Management Matrix (Eisenhower Matrix)
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill's files, runtime instructions, and requested resources align with a Notion-based Eisenhower-matrix task manager and do not request unrelated credentials or perform suspicious network calls.
This skill appears to do exactly what it claims: call a local Python script that interacts with the Notion API. Before installing/use: 1) Verify the Notion API key you place in ~/.config/notion/api_key has the minimal scopes needed (only access to the target database). 2) Inspect the bundled script (scripts/notion_quadrant_manager.py) locally (it is included) and run it manually to confirm behavior. 3) Be aware the script will create/update notion_quadrant_manager_state.json in the script directory (it caches database/schema and task info). 4) Install only the listed dependency (requests) in a controlled Python environment (virtualenv) to avoid affecting other Python packages. 5) If you need stricter privacy, consider putting the API key in a secure store rather than a plain file. Overall the components are proportionate and consistent with the stated purpose.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
No visible risk-analysis findings were reported for this release.