notion-spec-to-implementation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow explicitly uses Notion:notion-search then Notion:notion-fetch to search for and read a spec page’s free-text content from Notion, which could include outsider-authored prompt-injection text if a provider user inserts it into the spec/page the workflow is pointed at.