notion-research-documentation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow uses Notion:notion-fetch to read full page content from the user’s Notion workspace, and that fetched page body is free-form text authored by other people (outsider) which is then ingested into the agent’s LLM context for synthesis.