pp-notion

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs the notion-pp-cli tool via npx from the @mvanhorn/printing-press-library package or through go install from the vendor's GitHub repository. These resources are associated with the documented vendor.
  • [COMMAND_EXECUTION]: The skill uses the bash tool to execute notion-pp-cli commands for managing pages, blocks, and databases.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted content from external Notion workspaces.
  • Ingestion points: Data is ingested via notion-pp-cli sync pages, notion-pp-cli blocks children list, and notion-pp-cli pages markdown export from the Notion API.
  • Boundary markers: The instructions specify using the --agent flag for structured JSON output, but do not define specific delimiters to isolate external content within the agent's context.
  • Capability inventory: The skill can execute shell commands, perform network requests to the Notion API, send POST requests to arbitrary URLs via the --deliver webhook:<url> flag, and write files using the --deliver file:<path> flag.
  • Sanitization: No explicit sanitization or filtering of the retrieved Notion content is described before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 09:54 AM