notion

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Required workflow exposes Notion page/block/database content that can include outsider-authored free text via the runtime commands that call the Notion API with attacker-controlled inputs (e.g., search/page --content/blocks/query-data-source), causing the script to ingest and print retrieved page body text.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The README contains a setup command that fetches and executes a remote install script (curl -fsSL https://bun.sh/install | bash), which runs code from https://bun.sh/install and is used to install the required runtime (bun) for this skill.