notion-meeting-intelligence
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill demonstrates an attack surface for indirect prompt injection due to the processing of untrusted data retrieved from external sources.\n
- Ingestion points: Data is ingested from the Notion workspace using tools like
Notion:notion-search,Notion:notion-fetch, andNotion:notion-query-data-sources, as seen inSKILL.mdand evaluation scenarios.\n - Boundary markers: The instructions do not provide explicit delimiters or instructions to ignore potential commands within the fetched content.\n
- Capability inventory: The skill has writing capabilities to the Notion workspace through
Notion:notion-create-pagesandNotion:notion-create-comment.\n - Sanitization: There is no evidence of sanitization or validation of external data before it is processed by the agent to create new pages or comments.
Audit Metadata