Skills
Navigate
skills/msapps-mobile/claude-plugins/notion-spec-to-implementation/Gen Agent Trust Hub

notion-spec-to-implementation

Pass

Audited by Gen Agent Trust Hub on Apr 28, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection because it fetches and processes untrusted specification documents from Notion to guide its actions.
  • Ingestion points: Specification content is retrieved via Notion:notion-search and Notion:notion-fetch in SKILL.md and reference/spec-parsing.md.
  • Boundary markers: Absent. There are no instructions to the agent to distinguish between its system-level instructions and instructions potentially embedded within the specification text.
  • Capability inventory: The skill has the ability to create and update content in Notion using Notion:notion-create-pages and Notion:notion-update-page as defined in SKILL.md and reference/task-creation.md.
  • Sanitization: None. The skill lacks validation or escaping of the retrieved content before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 28, 2026, 01:40 PM
Security Audit — agent-trust-hub — notion-spec-to-implementation