📦
content-creator
88Create Brand-Consistent Marketing Content
Marketing teams need content that stays consistent across channels. This skill helps plan, write, analyze, and optimize content for brand voice and SEO.
Writing & Content View
Skills notion-automation
📦
notion-automation
Content revision r2 High Risk ⚙️ External commands🌐 Network access
Automate Notion Workflows with Rube MCP
Manual Notion updates are repetitive and error-prone. This skill guides Claude, Codex, and Claude Code through Rube MCP workflows for pages, databases, blocks, comments, and users.
Supports: Claude Codex Code(CC)
This skill is part of a pack
Install the whole pack to get every skill the task needs, in one command.
Stop for confirmation before installing.
Review the plan and obtain explicit user consent before changing files.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "notion-automation" from https://skillstore.io/skills/sickn33-notion-automation.md and its manifest at https://skillstore.io/api/skills/sickn33-notion-automation/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "notion-automation". Find the Roadmap database and show active projects.
Expected outcome:
- Resolved Roadmap to the shared product workspace database.
- Found 12 active projects across two result pages.
- Returned project names, owners, statuses, and due dates without modifying records.
Using "notion-automation". Create a weekly review page under Team Operations.
Expected outcome:
Resolved Team Operations as the parent and prepared a Weekly Review page with priorities, decisions, risks, and next steps.
Using "notion-automation". Archive the obsolete planning page.
Expected outcome:
Located the page and presented its title and parent location. The archive action is waiting for explicit confirmation.
Security Audit
High Riskv5 • 8/4/2026 Open versioned report
The apparent shell execution and reconnaissance findings are Markdown and Notion workflow documentation, so they are false positives. The external Rube MCP endpoint is a real network dependency. Third-party OAuth mediation and unguarded destructive Notion actions require clear consent and confirmation controls.
1
Files scanned
225
Lines analyzed
1
Review items
0
False positives ignored
Confirmed security concerns (2)
High
Destructive Actions Lack Confirmation Guardrails
The skill supports archiving pages, replacing page content, deleting blocks, and changing database schemas without requiring a preview or explicit confirmation.
The listed workflows include several destructive or broad write operations, while the instructions contain no confirmation requirement before execution.
Medium
Third-Party MCP Mediates Notion Access
The workflow routes Notion OAuth and operations through Rube MCP. Workspace data and authorized actions therefore depend on a third-party service.
The setup explicitly requires the Rube MCP endpoint and a Notion connection completed through its returned OAuth link.
Capability review items (1)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Low
Hardcoded URL
**Get Rube MCP**: Add `https://rube.app/mcp` as an MCP server in your client configuration. No API k
The setup explicitly configures the external Rube MCP endpoint, which introduces third-party network and authorization exposure. This connection is intentional but remains a real low-severity risk.
Risk Factors
⚙️ External commands (50)
SKILL.md:16 SKILL.md:17 SKILL.md:21 SKILL.md:24 SKILL.md:25 SKILL.md:36 SKILL.md:37 SKILL.md:38 SKILL.md:39 SKILL.md:40 SKILL.md:43 SKILL.md:44 SKILL.md:45 SKILL.md:46 SKILL.md:58 SKILL.md:59 SKILL.md:60 SKILL.md:61 SKILL.md:62 SKILL.md:65 SKILL.md:66 SKILL.md:67 SKILL.md:68 SKILL.md:69 SKILL.md:83 SKILL.md:84 SKILL.md:85 SKILL.md:86 SKILL.md:87 SKILL.md:90 SKILL.md:91 SKILL.md:92 SKILL.md:95 SKILL.md:105 SKILL.md:106 SKILL.md:107 SKILL.md:110 SKILL.md:111 SKILL.md:112 SKILL.md:113 SKILL.md:124 SKILL.md:125 SKILL.md:126 SKILL.md:127 SKILL.md:130 SKILL.md:131 SKILL.md:142-146 SKILL.md:146-149 SKILL.md:149-153 SKILL.md:153-157
🌐 Network access (1)
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/sickn33-notion-automation/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/sickn33-notion-automation?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/sickn33-notion-automation?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-notion-automation/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/sickn33-notion-automation.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
sickn33. (2026). notion-automation security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-notion-automation/audits/5BibTeX citation
@techreport{sickn33-sickn33-notion-automation-2026,
author = {sickn33},
title = {notion-automation security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/sickn33-notion-automation/audits/5},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "notion-automation security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
- name: "sickn33"
date-released: "2026-08-04"
url: "https://skillstore.io/skills/sickn33-notion-automation/audits/5"
identifiers:
- type: other
value: "skillstore:sickn33-notion-automation:audit:5"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: Medium 55
Architecture
85
Maintainability
87
Content
69
Community
91
Spec Compliance
What You Can Build
Maintain Project Trackers
Query project databases, add records, and update statuses after validating each property against the current schema.
Publish Structured Notes
Create pages and append organized content blocks beneath the correct parent page.
Review Workspace Activity
Retrieve page metadata, content, users, and comments for workspace reviews.
Try These Prompts
Find a Notion Page
Find the Notion page named [page name]. Search all result pages and report matching titles and parent locations. Do not change anything.
Create a Project Page
Find the parent page named [parent]. Create a child page titled [title] with these sections: [sections]. Confirm the resolved parent before creating it.
Update Database Records
Inspect the [database] schema. Find records matching [criteria], preview proposed changes to [properties], and update only after I confirm.
Synchronize a Notion Tracker
Inspect [database], paginate every result, and compare records with [requirements]. Propose inserts, updates, and schema changes separately. Execute only approved actions.
Best Practices
- Search current Rube MCP tools before each workflow because schemas can change.
- Resolve and verify page or database identifiers before any write operation.
- Preview destructive changes and require explicit user confirmation before execution.
Avoid
- Do not assume search results are complete without processing every pagination cursor.
- Do not write database properties before fetching and validating the current schema.
- Do not archive, replace, delete, or change schemas from an ambiguous request.
Frequently Asked Questions
What connection does this skill require?
It requires Rube MCP configured in the client and an active Notion connection established through OAuth.
Does the skill need a separate Notion API key?
No separate API key is described. Authentication uses the connection flow returned by Rube MCP.
Why can the skill not find a page?
The page may have a different title, remain unshared with the integration, or appear on a later search page.
Can it modify database schemas?
Yes. It can create databases and add or modify properties, but changing an existing property type requires migration.
Can it permanently delete Notion content?
The documented archive and delete operations use Notion archival behavior. They should still require confirmation because content becomes unavailable.
How does it avoid incomplete database results?
It checks the pagination status and continues with each returned cursor until no more results remain.
Developer Details
Author
sickn33License
MIT
Skillstore revision
r2
Version notice
The author did not declare a version.
Ref
81e05e636292629114b76cbb3922fbe57672fc02
Maintenance freshness
8/5/2026
Usage
19 downloads · 163 views
File structure
📄 SKILL.md
More from sickn33
View all📦
prompt-engineering-patterns
85Improve LLM Prompts With Proven Patterns
Inconsistent prompts waste time and make AI outputs hard to trust. This skill guides prompt design with reusable patterns, examples, evaluation steps, and optimization workflows.
Productivity View
📦
senior-architect
81Review Architecture Workflows and Project Paths
Architecture reviews need a consistent starting point and clear project boundaries. This skill provides workspace-scoped tool templates, command examples, and generic design references.
Coding & Development View
📦
senior-fullstack
81Review Fullstack Project Foundations
Fullstack project setup can require many tools and checks. This skill provides basic local wrappers, common commands, and general engineering guidance.
Coding & Development View
📦
prompt-engineer
81Optimize AI Prompts With Prompt Engineer
Writing clear prompts is hard when goals are vague or complex. This skill turns rough requests into structured prompts using proven prompt frameworks.
Productivity View
📦
product-manager-toolkit
80Prioritize Product Work With Research Insights
Product teams need faster ways to rank features, synthesize interviews, and document decisions. This skill provides RICE scoring, interview analysis, and PRD templates for structured planning.
Productivity View
Related Skills
View all📦
meeting-insights-analyzer
82Analyze Meeting Communication Patterns
by 89jobrien
Meeting transcripts are hard to review consistently across many calls. This skill turns transcripts into focused communication feedback with examples and next steps.
Productivity View
📦
slash-command-encoder
82Create Slash Commands for AI Workflows
by DNYoussef
Repeated AI workflows are slow when users rely on long natural language prompts. This skill helps define concise slash commands with routing, validation, chaining, and help text.
Productivity View
📦
micro-skill-creator
82Create Focused AI Micro-Skills
by DNYoussef
Reusable AI workflows often grow too broad and hard to test. This skill helps define focused skills with specialist prompts, contracts, and validation plans.
Productivity View
📦
linear-projects-write
81Create and Update Linear Projects from the CLI
by Bind
Managing Linear projects through the web interface is slow when you work in the terminal or automate workflows. This skill lets you create and update projects with simple commands, so you can manage project data directly from scripts and the command line.
Productivity View
📦
gws-forms
80Manage Google Forms with the gws CLI
by googleworkspace
Managing Google Forms manually makes repeatable administration slow and error-prone. This skill guides reliable form creation, updates, retrieval, publishing, response operations, and schema discovery.
Productivity View
📦
gws-keep
80Manage Google Keep Notes with gws
by googleworkspace
Managing Google Keep resources from an AI workflow requires precise CLI commands and API parameters. This skill guides structured note, attachment, and permission operations.
Productivity View