notion-knowledge-capture
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill configuration and setup instructions reference the official Notion MCP server at
https://mcp.notion.com/mcp. This is a well-known and trusted service provided by Notion Labs, Inc. for the intended purpose of the skill. - [PROMPT_INJECTION]: The skill processes untrusted user-provided conversations to generate structured Notion pages, which presents a surface for indirect prompt injection. \n
- Ingestion points: User conversations and notes provided during execution (referenced in SKILL.md and evaluation files). \n
- Boundary markers: The skill does not explicitly instruct the agent to use delimiters or ignore embedded instructions within the ingested text. \n
- Capability inventory: The skill uses tools like
Notion:notion-create-pagesandNotion:notion-update-pageto write content to external Notion databases. \n - Sanitization: No specific sanitization or escaping of the input content is described in the prompt workflow.
- [SAFE]: No malicious obfuscation, persistence mechanisms, or unauthorized privilege escalation attempts were detected. All shell commands provided in the documentation are for environment setup and user-directed configuration.
Audit Metadata