notion-research-documentation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). At runtime the skill uses Notion MCP tools (Notion:notion-search to find pages, then fetches/synthesizes their content via Notion page reads) and ingests the body text of Notion pages authored by other people into the agent’s LLM context, which is outsider-authored free text.