notion-markdown-conversion
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill fetches and processes content from external Notion databases and pages, creating a surface for indirect prompt injection if the source content contains malicious instructions.
- Ingestion points: Data is ingested from Notion via the
mcp__Notion__notion-searchandmcp__Notion__notion-fetchtools. - Boundary markers: The skill lacks explicit instructions or delimiters (like XML tags or triple quotes) to help the agent distinguish between the skill's formatting instructions and potentially malicious instructions embedded within the fetched Notion data.
- Capability inventory: The skill has access to filesystem operations via the
WriteandReadtools, as well as the ability to search and fetch from Notion. - Sanitization: There is no mention of sanitizing, escaping, or filtering the retrieved Notion content before it is converted to Markdown and returned to the agent's context.
Audit Metadata