notion-spec-to-implementation
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides setup instructions involving shell commands (
codex mcp add notion --url https://mcp.notion.com/mcp) to connect to Notion's official services. This is a standard configuration process for the platform.- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from Notion pages to generate implementation plans, presenting a potential surface for indirect prompt injection. * Ingestion points: External content is retrieved usingNotion:notion-fetchas described inSKILL.mdandreference/spec-parsing.md. * Capability inventory: The skill can create and modify content in the user's Notion workspace viaNotion:notion-create-pagesandNotion:notion-update-page. * Boundary markers: No specific delimiters or "ignore previous instructions" warnings are used when processing the fetched specification content. * Sanitization: The skill does not implement explicit validation or filtering of the content retrieved from Notion pages.
Audit Metadata