notion-cli
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires installing the
@iansinnott/notion-clipackage from NPM. Note that there is an inconsistency between the linked GitHub homepage (litencatt/notion-cli) and the NPM package name (@iansinnott/notion-cli), which refers to different project owners. - [COMMAND_EXECUTION]: The agent executes shell commands using the
notion-clibinary andcurlto perform operations like searching and updating Notion content. - [PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection because it ingests data from external Notion pages which could contain malicious instructions. * Ingestion points:
notion-cli page retrieve <PAGE_ID> -rin SKILL.md. * Boundary markers: Delimiters or 'ignore instructions' warnings are absent. * Capability inventory: Includes workspace modification and network operations via curl. * Sanitization: External content is not sanitized before interpolation into the prompt context.
Audit Metadata