notion-research-documentation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow for this skill explicitly ingests free-text from Notion workspace pages by first searching (Notion:notion-search) and then fetching selected page contents (Notion:notion-fetch) to synthesize and cite them, meaning an outsider who can add/poison Notion content can have it read at runtime.