Security audit
Security checks for vulnerabilities and agentic risk
This skill does what it says: it parses expense messages and writes them to a user-configured Notion database.
Install only if you are comfortable storing expense details in Notion. Use a dedicated Notion integration token shared only with the intended expense database, and review the database permissions before use.
Credentials or environment variables flow to a network sink. This is a high-confidence indicator of credential exfiltration.
}
}
response = requests.post(
"https://api.notion.com/v1/pages",
headers=headers,
json=payload,
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
### Required Notion Database Schema
| Property | Type | Notes |
|------------------|--------|-----------------------------------------------------------------------------------------------|
| Name | title | Expense description |
| Amount | number | Numeric value in SGD, no currency prefix |
This code performs an external network transmission to Notion containing personal expense records. In the context of an agent skill, outbound transmission of financial activity to a third party is sensitive and should be treated as a real privacy/security concern unless clearly disclosed and authorized by the user.
}
}
response = requests.post(
"https://api.notion.com/v1/pages",
headers=headers,
json=payload,
This code performs an external network transmission to Notion containing personal expense records. In the context of an agent skill, outbound transmission of financial activity to a third party is sensitive and should be treated as a real privacy/security concern unless clearly disclosed and authorized by the user.
}
}
response = requests.post(
"https://api.notion.com/v1/pages",
headers=headers,
json=payload,
The function sends user-provided expense details, payment method, amount, and date to a third-party service without any in-function disclosure, confirmation, or consent check. In an agent/skill context, this can cause silent transmission of personal financial data to an external platform, which is a privacy and data-handling risk even though the destination is legitimate.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
}
response = requests.post(
"https://api.notion.com/v1/pages",
headers=headers,
json=payload,
timeout=30
The skill writes user-provided expense data to an external Notion database, but the description does not clearly warn users that their chat input will be persisted remotely. This can cause unintended disclosure of personal financial information because users may treat the interaction like ephemeral chat rather than a data-writing action.
No suspicious patterns detected.