notion
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill provides documentation and command examples for interacting with the official Notion API at
api.notion.com. Notion is a well-known service, and the documented operations (searching, creating pages, and managing databases) are standard API functionalities. - [SAFE]: Authentication is handled by storing an API key in a local configuration file (
~/.config/notion/api_key) and reading it into an environment variable. This is a standard and recommended practice for command-line tools to avoid exposing credentials in shell history or code. - [NO_CODE]: The skill consists entirely of markdown documentation and example commands. It does not include any executable scripts, binaries, or automated code, which significantly minimizes the potential for malicious behavior.
- [SAFE]: Although the skill enables data ingestion from an external source (Notion pages and databases), which is a common vector for indirect prompt injection, this is inherent to the integration's purpose. The skill does not implement unsafe data handling and relies on the AI agent's core safety guardrails to process external content.
Audit Metadata