notion-artifact-capture

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). In the required runtime workflow, Hermes reads only user-provided artifact fields (name/topic/summary/notes/optional Markdown) and then writes them to Notion, while the only Notion text it ingests is first-party workspace data-source schema retrieved via the configured data_source_id—there is no step that ingests arbitrary outsider-authored free text from a queue/feed/chat/web pages without selecting a specific item.