notion-spec-to-implementation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). Outsider source category: public/third-party authored content—at runtime the skill fetches a Notion “spec” via Notion:notion-fetch (and may also fetch task database schema via Notion:notion-fetch), so if that Notion page/database is authored by someone other than the operating user, its free-form text is ingested into the agent’s LLM context.