skills/jeremylongshore/claude-code-plugins-plus-skills/notion-reference-architecture/Gen Agent Trust Hub
notion-reference-architecture
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference architecture for developers and does not contain executable malicious code.
- [DATA_EXPOSURE]: The skill correctly instructs users to manage sensitive integration tokens via environment variables (NOTION_TOKEN) rather than hardcoding them.
- [EXTERNAL_DOWNLOADS]: Refers to the official @notionhq/client library from the NPM registry, which is the standard and expected dependency for Notion integrations.
- [PROMPT_INJECTION]: The skill architectural pattern includes ingesting data from the Notion API. While this represents a theoretical surface for indirect prompt injection if the content is later used in an LLM prompt, the skill provides structured data extraction helpers which facilitate safe handling.
Audit Metadata