notion
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the official Notion
ntnCLI and developer documentation from a well-known service (developers.notion.com). It contains a strict security directive forbidding the agent from auto-installing the CLI, requiring explicit user action for setup. - [CREDENTIALS_UNSAFE]: The skill prioritizes credential safety by instructing the agent to never output Notion API tokens (e.g., those prefixed with
ntn_orsecret_) and providing specific guidance on using secure, non-tracked environment files with restricted permissions. - [COMMAND_EXECUTION]: The instructions describe the use of the
ntnCLI for legitimate tasks such as file uploads and CI/CD operations. It provides safe patterns for shell piping and warns against using tokens in command history or tracked files.
Audit Metadata