pd-notion-create-page
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a TypeScript script via
npx tsxto interact with Notion, as documented in theSKILL.mdfile.\n- [PROMPT_INJECTION]: The skill is identified as having an indirect prompt injection surface.\n - Ingestion points: The script accepts user-provided text through
--contentand--propflags inSKILL.md.\n - Boundary markers: No delimiters or warnings are present to distinguish user input from instructions.\n
- Capability inventory: The skill can execute local scripts and write data to the Notion API.\n
- Sanitization: There is no evidence of sanitization or escaping of the user-provided data before it is processed.
Audit Metadata