notion-search-retrieve
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the
@notionhq/clientpackage to be installed from the npm registry to interact with the Notion API. - [PROMPT_INJECTION]: The skill facilitates the ingestion of data from external Notion workspaces which could potentially contain untrusted instructions (indirect prompt injection surface). * Ingestion points: Data is retrieved via
notion.search,notion.databases.query,notion.pages.retrieve, andnotion.blocks.children.listmethods acrossSKILL.mdandreferences/examples.md. * Boundary markers: No explicit delimiters or warnings to ignore embedded instructions were found in the code snippets. * Capability inventory: The skill is configured with access toBash,Write,Edit, andGreptools, which could be targeted by instructions embedded in the retrieved Notion content. * Sanitization: The provided code snippets do not implement specific sanitization or validation of the retrieved content before it is processed or used.
Audit Metadata