notion-spec-to-implementation

Pass

Audited by Gen Agent Trust Hub on Sep 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides setup instructions involving shell commands (codex mcp add notion --url https://mcp.notion.com/mcp) to connect to Notion's official services. This is a standard configuration process for the platform.- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from Notion pages to generate implementation plans, presenting a potential surface for indirect prompt injection. * Ingestion points: External content is retrieved using Notion:notion-fetch as described in SKILL.md and reference/spec-parsing.md. * Capability inventory: The skill can create and modify content in the user's Notion workspace via Notion:notion-create-pages and Notion:notion-update-page. * Boundary markers: No specific delimiters or "ignore previous instructions" warnings are used when processing the fetched specification content. * Sanitization: The skill does not implement explicit validation or filtering of the content retrieved from Notion pages.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 5, 2026, 12:08 PM