notion-research-documentation
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill is subject to indirect prompt injection risks common in research tools. It fetches content from arbitrary Notion pages (
Notion:notion-fetch) to generate summaries and documentation. If a source page contains adversarial instructions, they could potentially influence the agent's behavior during the synthesis phase.\n - Ingestion points: Content is ingested from the Notion workspace via
notion-fetch(referenced inSKILL.mdandexamples/).\n - Boundary markers: The instructions do not specify the use of delimiters or clear directives for the agent to ignore embedded instructions in fetched data.\n
- Capability inventory: The agent has the capability to write new pages to the workspace (
Notion:notion-create-pages).\n - Sanitization: There are no documented steps for validating or filtering the content fetched from source pages.\n- [NO_CODE]: The skill consists entirely of Markdown documentation, templates, and examples. It does not include any executable scripts (Python, Node.js), binaries, or configuration files that trigger code execution.
Audit Metadata