notion-integration
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill facilitates bidirectional synchronization with Notion using local
pnpm actioncommands. All described behaviors align with the stated purpose of Notion integration. - [CREDENTIALS_UNSAFE]: No hardcoded credentials were found. The skill explicitly mandates per-user OAuth and warns against using
NOTION_API_KEYfrom the environment or manual tokens, demonstrating a strong security posture regarding secret management. - [REMOTE_CODE_EXECUTION]: The skill does not perform any remote code downloads or dynamic execution from external sources. It relies on local scripts managed via the
pnpmaction runner. - [DATA_EXFILTRATION]: Data transfer is restricted to the synchronization of document content between the local environment and the user's authorized Notion workspace. No suspicious network patterns or unauthorized destinations were detected.
- [PROMPT_INJECTION]: The instructions do not contain any patterns attempting to override agent behavior, bypass safety guardrails, or reveal system prompts.
Audit Metadata