ClawHub
Back to skill

Security audit

Notion

Security checks across malware telemetry and agentic risk

Overview

This is a coherent Notion API helper with disclosed credential use and meaningful write-safety guardrails, though users should scope the Notion integration carefully.

Before installing, create a dedicated low-scope Notion integration, share only the pages or databases needed for the task, protect any token file with restrictive permissions, and be explicit when asking the agent to write to Notion so it does not infer the wrong workspace or target.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Rogue AgentSelf-Modification, Session Persistence
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Missing User Warnings

Medium
Confidence
87% confidence
Finding
The README instructs users to place a long-lived Notion API token directly into an environment variable without any warning about credential sensitivity, shell history, terminal logging, or leakage to child processes. While exporting a token is common, omitting handling guidance in a security-sensitive skill increases the chance the secret is exposed through screenshots, shell history, process inspection, crash reports, or reused sessions.

Vague Triggers

Medium
Confidence
85% confidence
Finding
The invocation text is broad enough to activate on generic requests such as 'log something', 'file something', or 'pull notes or tasks', which may cause the agent to select this skill even when the user did not clearly intend a Notion action. In a write-capable skill, over-triggering increases the chance of unnecessary workspace access or unintended writes to the wrong system or workspace, especially because the skill supports both reads and mutations.

Session Persistence

Medium
Category
Rogue Agent
Content
## Quick Start

1. Create a Notion integration at <https://www.notion.so/my-integrations>
2. Copy the Internal Integration Token (starts with `ntn_`)
3. Export it: `export NOTION_API_KEY=ntn_xxx`
4. Share the target pages and databases with the integration in the Notion UI, otherwise they are invisible to the API
Confidence
75% confidence
Finding
Create a Notion integration at <https://www.notion.so/my-integrations> 2. Copy the Internal Integration Token (starts with `ntn_`) 3. Export it: `export NOTION_API_KEY=ntn_xxx` 4. Share the target pag

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.