notion
Warn
Audited by Snyk on Aug 24, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The Notion skill ingests outsider-authored free text at runtime when the agent uses its read tools (e.g.,
getPageAsMarkdown,getBlockChildren,listComments) to fetch and then process Markdown/block/comment text from a Notion workspace page selected via outsider input (page title/id/comment target).
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata