pp-notion
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
notion-pp-clitool vianpxfrom the@mvanhorn/printing-press-librarypackage or throughgo installfrom the vendor's GitHub repository. These resources are associated with the documented vendor. - [COMMAND_EXECUTION]: The skill uses the
bashtool to executenotion-pp-clicommands for managing pages, blocks, and databases. - [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted content from external Notion workspaces.
- Ingestion points: Data is ingested via
notion-pp-cli sync pages,notion-pp-cli blocks children list, andnotion-pp-cli pages markdown exportfrom the Notion API. - Boundary markers: The instructions specify using the
--agentflag for structured JSON output, but do not define specific delimiters to isolate external content within the agent's context. - Capability inventory: The skill can execute shell commands, perform network requests to the Notion API, send POST requests to arbitrary URLs via the
--deliver webhook:<url>flag, and write files using the--deliver file:<path>flag. - Sanitization: No explicit sanitization or filtering of the retrieved Notion content is described before it is processed by the agent.
Audit Metadata