recipe-notion-meeting-notes
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local TypeScript script
resources/pd-notion.tsusingnpx tsx. This is a standard pattern for extending agent capabilities via local scripts. The script is used to search, create, and modify Notion pages. - [EXTERNAL_DOWNLOADS]: The use of
npxmay trigger the download of thetsxexecution environment from the official npm registry if it is not already available in the local environment. This is standard Node.js behavior. - [PROMPT_INJECTION]: The skill ingests user-provided data (such as meeting titles and attendees) to populate Notion pages. This represents an indirect prompt injection surface; however, this behavior is essential to the skill's primary function of note-taking and is considered a low risk within this context.
Audit Metadata