Skills notion-automation
📦

notion-automation

Content revision r2 High Risk ⚙️ External commands🌐 Network access

Automate Notion Workflows with Rube MCP

Manual Notion updates are repetitive and error-prone. This skill guides Claude, Codex, and Claude Code through Rube MCP workflows for pages, databases, blocks, comments, and users.

Supports: Claude Codex Code(CC)
⚠️ 38 Poor

This skill is part of a pack

Install the whole pack to get every skill the task needs, in one command.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "notion-automation" from https://skillstore.io/skills/sickn33-notion-automation.md and its manifest at https://skillstore.io/api/skills/sickn33-notion-automation/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Test it

Using "notion-automation". Find the Roadmap database and show active projects.

Expected outcome:

  • Resolved Roadmap to the shared product workspace database.
  • Found 12 active projects across two result pages.
  • Returned project names, owners, statuses, and due dates without modifying records.

Using "notion-automation". Create a weekly review page under Team Operations.

Expected outcome:

Resolved Team Operations as the parent and prepared a Weekly Review page with priorities, decisions, risks, and next steps.

Using "notion-automation". Archive the obsolete planning page.

Expected outcome:

Located the page and presented its title and parent location. The archive action is waiting for explicit confirmation.

Security Audit

High Risk
v5 • 8/4/2026 Open versioned report

The apparent shell execution and reconnaissance findings are Markdown and Notion workflow documentation, so they are false positives. The external Rube MCP endpoint is a real network dependency. Third-party OAuth mediation and unguarded destructive Notion actions require clear consent and confirmation controls.

1
Files scanned
225
Lines analyzed
1
Review items
0
False positives ignored

Confirmed security concerns (2)

High
Destructive Actions Lack Confirmation Guardrails
The skill supports archiving pages, replacing page content, deleting blocks, and changing database schemas without requiring a preview or explicit confirmation.
The listed workflows include several destructive or broad write operations, while the instructions contain no confirmation requirement before execution.
Medium
Third-Party MCP Mediates Notion Access
The workflow routes Notion OAuth and operations through Rube MCP. Workspace data and authorized actions therefore depend on a third-party service.
The setup explicitly requires the Rube MCP endpoint and a Notion connection completed through its returned OAuth link.
Capability review items (1)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Low
Hardcoded URL
**Get Rube MCP**: Add `https://rube.app/mcp` as an MCP server in your client configuration. No API k
The setup explicitly configures the external Rube MCP endpoint, which introduces third-party network and authorization exposure. This connection is intentional but remains a real low-severity risk.
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/sickn33-notion-automation/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/sickn33-notion-automation/security.svg)](https://skillstore.io/skills/sickn33-notion-automation?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/sickn33-notion-automation?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-notion-automation/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/sickn33-notion-automation.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

sickn33. (2026). notion-automation security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-notion-automation/audits/5

BibTeX citation

@techreport{sickn33-sickn33-notion-automation-2026, author = {sickn33}, title = {notion-automation security audit report (audit version 5)}, institution = {Skillstore}, year = {2026}, number = {5}, url = {https://skillstore.io/skills/sickn33-notion-automation/audits/5}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "notion-automation security audit report (audit version 5)" version: "unspecified" type: report authors: - name: "sickn33" date-released: "2026-08-04" url: "https://skillstore.io/skills/sickn33-notion-automation/audits/5" identifiers: - type: other value: "skillstore:sickn33-notion-automation:audit:5" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
55
Architecture
85
Maintainability
87
Content
69
Community
91
Spec Compliance

What You Can Build

Maintain Project Trackers

Query project databases, add records, and update statuses after validating each property against the current schema.

Publish Structured Notes

Create pages and append organized content blocks beneath the correct parent page.

Review Workspace Activity

Retrieve page metadata, content, users, and comments for workspace reviews.

Try These Prompts

Find a Notion Page
Find the Notion page named [page name]. Search all result pages and report matching titles and parent locations. Do not change anything.
Create a Project Page
Find the parent page named [parent]. Create a child page titled [title] with these sections: [sections]. Confirm the resolved parent before creating it.
Update Database Records
Inspect the [database] schema. Find records matching [criteria], preview proposed changes to [properties], and update only after I confirm.
Synchronize a Notion Tracker
Inspect [database], paginate every result, and compare records with [requirements]. Propose inserts, updates, and schema changes separately. Execute only approved actions.

Best Practices

  • Search current Rube MCP tools before each workflow because schemas can change.
  • Resolve and verify page or database identifiers before any write operation.
  • Preview destructive changes and require explicit user confirmation before execution.

Avoid

  • Do not assume search results are complete without processing every pagination cursor.
  • Do not write database properties before fetching and validating the current schema.
  • Do not archive, replace, delete, or change schemas from an ambiguous request.

Frequently Asked Questions

What connection does this skill require?
It requires Rube MCP configured in the client and an active Notion connection established through OAuth.
Does the skill need a separate Notion API key?
No separate API key is described. Authentication uses the connection flow returned by Rube MCP.
Why can the skill not find a page?
The page may have a different title, remain unshared with the integration, or appear on a later search page.
Can it modify database schemas?
Yes. It can create databases and add or modify properties, but changing an existing property type requires migration.
Can it permanently delete Notion content?
The documented archive and delete operations use Notion archival behavior. They should still require confirmation because content becomes unavailable.
How does it avoid incomplete database results?
It checks the pagination status and continues with each returned cursor until no more results remain.

Developer Details

Author

sickn33

License

MIT

Skillstore revision

r2

Version notice

The author did not declare a version.

Ref

81e05e636292629114b76cbb3922fbe57672fc02

Maintenance freshness

8/5/2026

Usage

19 downloads · 163 views

File structure

📄 SKILL.md