notion
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides templates for creating and updating Notion database entries based on user-supplied input, establishing a surface for indirect prompt injection.\n
- Ingestion points: The
createTaskJavaScript function acceptstitleanddueISOarguments inSKILL.md.\n - Boundary markers: The template does not implement delimiters or instructions for the agent to ignore potentially malicious instructions embedded in the user-provided content.\n
- Capability inventory: The skill performs network requests to the official Notion API to modify remote workspace data.\n
- Sanitization: The provided code lacks explicit validation or escaping for external content before it is processed by the API.\n- [EXTERNAL_DOWNLOADS]: Fetches the official
@notionhq/clientlibrary from the public npm registry to facilitate the integration.\n- [SAFE]: Sensitive credentials are correctly managed using environment variables (NOTION_TOKEN), and all network operations target verified infrastructure belonging to a well-known service.
Audit Metadata