notion-spec-to-implementation
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation includes setup instructions for the Notion MCP using the official endpoint
https://mcp.notion.com/mcp. This is a well-known service and the reference is part of the standard configuration required for the skill's functionality.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process content from external Notion pages via theNotion:notion-fetchtool. This creates a surface where malicious content within a specification could attempt to influence the agent's behavior.\n - Ingestion points: The workflow identifies
Notion:notion-fetchin Step 1 as the primary method for retrieving data.\n - Boundary markers: The instructions do not define explicit delimiters to isolate fetched data from the agent's internal logic.\n
- Capability inventory: The agent has the ability to create and update pages in the user's Notion workspace using
Notion:notion-create-pagesandNotion:notion-update-page.\n - Sanitization: No specific content validation or escaping mechanisms are mentioned for the data retrieved from Notion.
Audit Metadata