notion-workspace-manager
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFEDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill is designed to transfer local repository documentation (such as steering documents, release notes, and specifications) to an external Notion workspace via MCP tool calls. This is the intended primary function of the workspace manager.
- [PROMPT_INJECTION]: The skill ingests data from untrusted documentation files within the repository to seed the Notion workspace structure, which presents a surface for indirect prompt injection.
- Ingestion points: Files in
documentation/steering/,documentation/releases/, anddocumentation/specs/. - Boundary markers: Absent; there are no specific instructions to the agent to ignore instructions embedded within the ingested files.
- Capability inventory: The agent can use the Notion MCP to create, update, move, and search pages and databases.
- Sanitization: No sanitization or validation of the ingested documentation content is performed before processing.
Audit Metadata