notion-deploy-integration
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill adheres to security best practices by instructing users to store the sensitive
NOTION_TOKENusing platform-native encrypted secret managers (such as Vercel Environment Variables, Railway Variables, and Fly Secrets) rather than hardcoding credentials in source code or configuration files.\n- [SAFE]: The skill uses the official@notionhq/clientSDK and interacts with well-known cloud services (Vercel, Railway, Fly.io). All tool configurations in the YAML frontmatter are appropriately scoped to these reputable services.\n- [SAFE]: The application modules provided for the Notion client singleton, rate limiter, and TTL cache are standard, safe implementations designed to improve stability and ensure compliance with Notion's API rate limits.\n- [SAFE]: No evidence of prompt injection, code obfuscation, or persistence mechanisms was found. The instructions are transparent and the deployment scripts follow standard developer workflows without attempting to bypass safety controls.
Audit Metadata