notion-knowledge-capture

Pass

Audited by Gen Agent Trust Hub on May 4, 2026

Risk Level: SAFE
Full Analysis
  • Notion Platform Integration: The skill utilizes integrated platform tools (Notion:notion-search, Notion:notion-fetch, Notion:notion-create-pages, and Notion:notion-update-page) for data management. These tools are used appropriately to organize user-provided information into structured databases like wikis, FAQs, and decision logs.
  • Data Ingestion Analysis: The skill is designed to process conversation context, which is an indirect prompt injection surface. However, the logic is focused on extraction and structured documentation rather than executing instructions contained within that data. The use of predefined templates in the reference/ directory helps maintain consistent and safe formatting.
  • Documentation and Examples: The provided examples and references contain shell commands (e.g., psql, lsof, docker logs). These are included as informative text for the user's documentation and are not executed by the skill itself, posing no risk to the local environment.
  • Credential Handling: There are no hardcoded secrets or sensitive file accesses. Examples correctly use placeholders like DB_PASSWORD=*********** and suggest the use of environment variables for secure configuration.
  • Resource Origin: All components, including the YAML configuration and reference files, are consistent with the stated purpose of knowledge capture and are authored by a trusted vendor.
Audit Metadata
Risk Level
SAFE
Analyzed
May 4, 2026, 04:35 PM