Notion API Integration

• Outcome: Pass
• Latest audit: May 28, 2026, 7:40 AM
• Version:
  1.0.2

Overview

This is a Notion API reference skill with disclosed credential use and local memory, and the risky operations are aligned with its stated purpose.

Install only if you want an agent to help operate against Notion through your own integration token. Use a least-privilege Notion integration, share only the pages/databases needed, keep NOTION_API_KEY out of chats, logs, screenshots, and repos, and review any create, update, archive, delete, or comment command before it runs against real workspace content.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (4)

Missing User Warnings

Medium

• Confidence: 90% confidence
• Finding: The file includes authenticated Notion API examples that can create and modify databases using a bearer token, but it provides no warning that these requests access live workspace data and may cause persistent changes. In a reusable agent skill, users may copy or automate these commands without understanding the scope of token permissions or the side effects of create/update operations.

Missing User Warnings

Medium

• Confidence: 94% confidence
• Finding: The examples include authenticated PATCH requests that modify page properties and archive pages, but they do not warn users that running them will immediately change or hide live Notion content. In documentation intended for copy-paste execution, omission of a clear destructive-action warning creates a real safety issue because users may unintentionally alter production workspace data.

Missing User Warnings

Low

• Confidence: 79% confidence
• Finding: The cover-setting example uses an external image URL without warning that external resources may introduce privacy, tracking, integrity, or availability concerns. While the bearer token is sent only to Notion, the resulting page may reference third-party content that can leak metadata or unexpectedly change over time.

Missing User Warnings

Medium

• Confidence: 90% confidence
• Finding: The setup instructions require use of a sensitive Notion integration token but do not include any warning about protecting it from shell history, shared terminals, screenshots, logs, or committing it to files. In a setup guide for an agent skill, this omission increases the chance of accidental credential disclosure, which could grant unauthorized access to shared Notion pages and databases.

VirusTotal

66/66 vendors flagged this skill as clean.