easy-notion-mcp-integration

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime path is Notion MCP tool calls (e.g., read_page, query_database, search_notion) that fetch Notion page/database content and return it as markdown to the agent, which is outsider-authored free text from third-party Notion workspaces the operating user didn’t author.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's installation/run instructions include fetching and executing remote code (e.g., "git clone https://github.com/Grey-Iris/easy-notion-mcp.git" and the recommended "npx easy-notion-mcp" invocation), which cause external code to be downloaded and run as part of runtime/setup.