database-query
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external Notion databases, which represents a potential attack surface for indirect prompt injection.
- Ingestion points: Notion database content retrieved via the query action (SKILL.md).
- Boundary markers: Absent. The instructions do not specify using delimiters or explicit 'ignore embedded instructions' prompts for the data returned from Notion.
- Capability inventory: The skill interprets, summarizes, and presents external database content.
- Sanitization: No specific sanitization or escaping of rich text or property values from the database is mentioned.
Audit Metadata