pd-notion-page
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local TypeScript script using the
npx tsxcommand to interact with the Notion API and retrieve page data. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its core functionality of reading external page content.
- Ingestion points: Content and properties are ingested from external Notion pages into the agent's context.
- Boundary markers: No specific delimiters or instructions to ignore instructions within the ingested content are present in the provided skill documentation.
- Capability inventory: The skill utilizes command execution through
npxto run its integration logic. - Sanitization: There is no evidence of sanitization or validation performed on the data fetched from Notion before it is processed by the agent.
Audit Metadata