nby-notion-smart-categorize

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's Step 1 workflow explicitly fetches page content (via the Notion API) and for link-only pages it fetches arbitrary web pages using Jina WebFetch (https://r.jina.ai/{LINK_URL}), and that third-party content is then analyzed to decide classifications and to move pages, so external/untrusted page content could influence actions.