📦 Notion Workflows — 自动化笔记
v1.0.0通过浏览器触发的工作流，自动创建、查询、更新 Notion 页面与数据库，生成模板并一键总结内容，让知识管理零手动。
0· 255·0 当前·0 累计
by 下载技能包
最后更新
2026/4/21
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill behaves like a browser automation helper for Notion but has gaps that make it unclear what will actually run. Before installing: (1) ask the maintainer to provide the missing scripts/assets (notion-scrape.py, templates) and a clear manifest of required binaries (Playwright, browsers, Python/Node versions); (2) ask how authentication is handled and whether any data is sent to external endpoints; (3) if you test it, do so with a non-sensitive/test Notion account first; (4) avoid enablin...详细分析 ▾
⚠ 用途与能力
The skill says it automates Notion via browser/Playwright and references helper scripts/templates, but the registry shows no code files for those scripts/assets and it declares no required binaries or credentials. Running Playwright/browser-driven workflows would normally require browser/runtime dependencies that are not declared, so the declared requirements do not match the stated capability.
⚠ 指令范围
SKILL.md tells the agent to open notion.so, perform auth if needed, snapshot pages/DBs, parse structure, fill rows and export PDFs/snapshots. Those instructions allow reading and exporting arbitrary Notion content the current session can access. The instructions are broad and vague (e.g., "snapshot page/DB", "auth if needed") and reference scripts (notion-scrape.py) and assets that are not present, which is inconsistent and increases risk.
ℹ 安装机制
There is no install spec (instruction-only), which minimizes on-disk installs. However, the workflow explicitly depends on browser/Playwright tooling and external scripts/templates that are not provided or declared; that missing dependency information is a gap rather than safe evidence.
ℹ 凭证需求
The skill declares no environment variables or credentials. That is internally consistent with using the user's browser session for auth, but the instructions still allow access to all Notion content reachable in that session. The lack of declared credentials or permissions means there is no explicit limitation on what data may be read or exported.
✓ 持久化与权限
always is false and the skill is user-invocable; it does not request persistent system-wide presence or modification of other skills. Autonomous invocation is allowed (platform default), which combined with the broad instructions increases the potential impact but is not itself unusual.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/15
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install notion-workflows
镜像加速npx clawhub@latest install notion-workflows --registry https://cn.longxiaskill.com