notion-load-scale
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the Notion API, which acts as a potential vector for malicious instructions if the source workspace is compromised. \n- Ingestion points: The
paginateDatabasegenerator inreferences/implementation.mdretrieves content vianotion.databases.query. \n- Boundary markers: The implementation does not include specific delimiters or prompt-isolation instructions to protect against instructions embedded in API results. \n- Capability inventory: The skill utilizes file system operations (fs.writeFileSync) and is allowed command execution tools (Bash). \n- Sanitization: No data sanitization or structural validation is performed on the API responses before they are processed by the worker. \n- [EXTERNAL_DOWNLOADS]: The skill references and requires official, well-known dependencies for its operation, specifically@notionhq/clientandnotion-client, as well as the standardp-queuelibrary. \n- [COMMAND_EXECUTION]: A diagnostic throughput benchmark inreferences/examples.mduses thecurlutility to perform sequential network requests to the official Notion API for latency measurement.
Audit Metadata