notion-knowledge-capture
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted conversation data and notes to generate structured Notion pages. While this presents an indirect prompt injection surface, the risk is limited to content modification within the user's Notion workspace. \n
- Ingestion points: User-provided conversation history and notes. \n
- Boundary markers: No explicit delimiters or instructions are provided to the agent to ignore embedded commands in the source text. \n
- Capability inventory: Access to Notion workspace via Notion:notion-search, notion-fetch, notion-create-pages, and notion-update-page. No shell or code execution tools are utilized. \n
- Sanitization: No explicit sanitization or filtering of the ingested content is performed before storage.
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to configure the official Notion MCP server at https://mcp.notion.com/mcp. This is a well-known service provided by the tool vendor.
Audit Metadata