notion-data-handling

Pass

Audited by Gen Agent Trust Hub on Sep 12, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill promotes secure authentication practices by instructing the use of environment variables (NOTION_TOKEN) instead of hardcoded credentials.
  • [SAFE]: The skill relies on official, well-known libraries (@notionhq/client and notion-client) for API interaction.
  • [SAFE]: The primary function of the skill is to provide PII redaction and data minimization, which are defensive security practices that reduce the overall attack surface.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from external Notion pages, which is a potential vector for indirect prompt injection. However, the risk is minimized by the skill's focus on structured data and sanitization.
  • Ingestion points: Data is fetched from Notion databases in references/pii-detection.md and references/compliance-patterns.md.
  • Boundary markers: None explicitly implemented for prompt isolation.
  • Capability inventory: Uses Read, Write, and Edit tools for interacting with Notion.
  • Sanitization: Implements regex-based PII scanning and property redaction routines to sanitize content.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 12, 2026, 01:47 PM