notion-research-documentation
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill uses official Notion tools and configurations pointing to the trusted 'notion.com' domain for its core operations.
- [SAFE]: Secret management is handled securely by directing users to use the platform's standard OAuth login flow, avoiding the use of hardcoded credentials.
- [PROMPT_INJECTION]: The skill processes content fetched from Notion pages, which is a standard surface for indirect prompt injection.
- Ingestion points: Data is fetched from the user's workspace using the 'Notion:notion-fetch' tool.
- Boundary markers: The templates provided in the 'reference/' directory lack specific delimiters or instructions to treat fetched content as untrusted data.
- Capability inventory: The skill can create and modify content in the Notion workspace using 'notion-create-pages' and 'notion-update-page'.
- Sanitization: There is no explicit logic to sanitize or validate the content retrieved from Notion before it is used to generate documentation.
Audit Metadata