skills/openhands/extensions/notion/Gen Agent Trust Hub

notion

Pass

Audited by Gen Agent Trust Hub on Mar 1, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes curl for making HTTP requests to the Notion API and jq for processing the resulting JSON data. These are standard system utilities used appropriately for API integration.
  • [DATA_EXFILTRATION]: Network activity is restricted to api.notion.com, which is the official endpoint for the Notion service. No sensitive local files are accessed, and data is only transmitted to this well-known service as part of the intended workflow.
  • [CREDENTIALS_UNSAFE]: Secrets are handled securely through the NOTION_INTEGRATION_KEY environment variable. The skill includes checks to ensure the variable is set and does not contain any hardcoded API keys or tokens.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 1, 2026, 06:31 PM