Is Charpup/openclaw-notion-mcp-wrapper safe?
Yes. Charpup/openclaw-notion-mcp-wrapper is safe to install. Oathe's behavioral security audit gave the openclaw-notion-mcp-wrapper skill by Charpup a trust score of 92/100 with 5 findings, none critical or high.
https://github.com/Charpup/openclaw-notion-mcp-wrapper
Is Charpup/openclaw-notion-mcp-wrapper safe to install?
This appears to be a legitimate, well-implemented Notion API wrapper with MCP integration, health monitoring, and fallback mechanisms. The code quality is high with comprehensive tests and proper error handling.
What security issues were found in Charpup/openclaw-notion-mcp-wrapper?
Category Scores
Findings (5)
LOW Mixed language documentation -5 ▶
The SKILL.md contains both English and Chinese text, which could potentially be used to hide instructions from non-Chinese speakers, though content appears benign
INFO External API connectivity -8 ▶
Skill makes legitimate API calls to Notion service as expected for its functionality
MEDIUM Executable code components -15 ▶
Skill contains JavaScript code and executable scripts, which is expected for a Node.js skill but increases risk surface
LOW Network activity during installation -5 ▶
Standard git clone network activity observed, all connections appear legitimate
MEDIUM API token requirement and hardcoded operations -12 ▶
Skill requires NOTION_TOKEN access and contains hardcoded page operations that could modify user's Notion workspace
Should I install Charpup/openclaw-notion-mcp-wrapper?
Oathe's verdict for Charpup/openclaw-notion-mcp-wrapper is SAFE with a trust score of 92/100. Recommendation: Install.