notion-ci-integration
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns or security risks were identified. The instructions promote defensive security practices, such as environment isolation, secret masking, and boundary enforcement.
- [INDIRECT_PROMPT_INJECTION]: The skill involves processing external data from Notion documentation and repository fixtures. It provides clear boundary markers by requiring explicitly shared fixtures and least-privilege tokens. The capability inventory is limited to standard inspection tools (Read, Glob, Grep) and controlled repository writes (Write, Edit). Mandatory sanitization is enforced through instructions to mask secret values, redact response metadata, and prevent the auto-updating of snapshots from live responses.
Audit Metadata