notion-integration

Pass

Audited by Gen Agent Trust Hub on Jul 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill facilitates bidirectional synchronization with Notion using local pnpm action commands. All described behaviors align with the stated purpose of Notion integration.
  • [CREDENTIALS_UNSAFE]: No hardcoded credentials were found. The skill explicitly mandates per-user OAuth and warns against using NOTION_API_KEY from the environment or manual tokens, demonstrating a strong security posture regarding secret management.
  • [REMOTE_CODE_EXECUTION]: The skill does not perform any remote code downloads or dynamic execution from external sources. It relies on local scripts managed via the pnpm action runner.
  • [DATA_EXFILTRATION]: Data transfer is restricted to the synchronization of document content between the local environment and the user's authorized Notion workspace. No suspicious network patterns or unauthorized destinations were detected.
  • [PROMPT_INJECTION]: The instructions do not contain any patterns attempting to override agent behavior, bypass safety guardrails, or reveal system prompts.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 13, 2026, 04:51 AM
Security Audit — agent-trust-hub — notion-integration