substack-notes-scraper

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Runtime path: the skill uses WebFetch to load the user-supplied “Notes URL” (a Substack Notes page on the public web) and then parses the rendered HTML into “Full Text”/“Text Preview” for inclusion in the LLM context; this is outsider-authored free text from the newsletter author(s) on that page.