notion-sdk-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference for official Notion SDK usage. All code patterns for initializing the Notion client correctly use environment variables for authentication, avoiding hardcoded credentials.
- [SAFE]: External references point to well-known and trusted sources, including the official Notion developer portal and verified GitHub repositories for the SDKs.
- [INDIRECT_PROMPT_INJECTION]: The skill describes methods for ingesting data from external sources (Notion API).
- Ingestion points: Untrusted data enters the agent context via
notion.databases.queryandnotion.blocks.children.listcalls documented inSKILL.mdandreferences/patterns.md. - Boundary markers: No explicit boundary markers or "ignore instructions" delimiters are provided in the code samples.
- Capability inventory: The skill patterns involve network operations (API calls) and basic output logging.
- Sanitization: While no specific prompt sanitization is provided, the skill includes type-safe property extractors in
references/examples.mdthat act as a form of schema validation for retrieved data.
Audit Metadata