moai-domain-notion
Warn
Audited by Snyk on Mar 2, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill explicitly includes a "WebFetch: Retrieve external data for sync" tool and a "Sync External Data to Notion" pattern in SKILL.md that iterates over external_data (creating pages from item.name/item.link), showing the agent will fetch and ingest external/untrusted web content as part of its workflow (SKILL.md Tools & Integration and the "Sync External Data to Notion" code snippet).
Audit Metadata