notion-debug-bundle
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides bash scripts to inspect the local environment, including Node.js and npm versions, OS details via uname, and dependency trees for the Notion SDK. These commands are typical for technical support diagnostics.
- [SAFE]: The diagnostic script accesses local files including application logs (app.log, server.log, output.log) and the .env file. It implements redaction logic using sed to mask Notion tokens (ntn_ and secret_ prefixes) and all environment variable values before packaging them into a local tarball. Network requests are restricted to official Notion domains (api.notion.com and status.notion.so) for connectivity testing and platform health verification.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from local application logs which could contain untrusted input. 1. Ingestion points: app.log, server.log, and output.log. 2. Boundary markers: Absent. 3. Capability inventory: Bash, curl, tar, npm, and node. 4. Sanitization: Regex-based token redaction via sed is applied before archiving log content.
Audit Metadata