Security audit
pontx-notion
Security checks across malware telemetry and agentic risk
Overview
This skill is a Notion API guidance skill that discloses credential use and mutation risks and instructs preview-and-confirm workflows before writes.
Install only if you intend to build or operate Notion integrations. Review any generated code before running it, keep Notion tokens in secrets, avoid logging workspace content, and require explicit confirmation before page, block, comment, view, or token deletion actions.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.