notion-api

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider-authored free text from Notion pages/blocks is fetched at runtime via scripts/notion_read_page.sh (and also notion_search.sh for titles) using /blocks/{id}/children and /search, then converted to plain text (blocktext / restitle) and emitted into the agent’s LLM context.