notion-operations

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md "Common Patterns" explicitly lists "Link Collection: Webhook (URL) → Fetch Content → AI Analysis → Create Notion Page", which indicates the skill fetches and analyzes arbitrary URL/webhook content (public/user-generated pages like YouTube/articles) so untrusted third‑party data would be read and could influence AI-driven actions.