notion-search-retrieve

Pass

Audited by Gen Agent Trust Hub on Mar 25, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires the @notionhq/client package to be installed from the npm registry to interact with the Notion API.
  • [PROMPT_INJECTION]: The skill facilitates the ingestion of data from external Notion workspaces which could potentially contain untrusted instructions (indirect prompt injection surface). * Ingestion points: Data is retrieved via notion.search, notion.databases.query, notion.pages.retrieve, and notion.blocks.children.list methods across SKILL.md and references/examples.md. * Boundary markers: No explicit delimiters or warnings to ignore embedded instructions were found in the code snippets. * Capability inventory: The skill is configured with access to Bash, Write, Edit, and Grep tools, which could be targeted by instructions embedded in the retrieved Notion content. * Sanitization: The provided code snippets do not implement specific sanitization or validation of the retrieved content before it is processed or used.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 25, 2026, 04:42 PM