notion-performance-tuning
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions and reference implementations do not contain any malicious patterns, obfuscation, or unauthorized data access attempts. The logic focuses entirely on performance optimization through caching, batching, and rate limiting.
- [CREDENTIALS_SAFE]: The skill follows security best practices by recommending that sensitive Notion integration tokens be passed via environment variables (
NOTION_TOKEN) rather than being hardcoded in the script. - [EXTERNAL_DOWNLOADS]: All external dependencies mentioned (such as
@notionhq/client,p-queue, andlru-cache) are well-known, widely-used libraries from official registries and trusted developers. - [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for ingesting data from the Notion API (e.g., via
notion.databases.queryinreferences/implementation.md). While this is an external data source, the skill does not interpolate this data into agent instructions or use it to drive dangerous capabilities, limiting the risk to standard data processing.
Audit Metadata