notion-docs-enhancer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill automates Playwright to navigate to arbitrary Notion URLs (see await mcp__plugin_playwright_playwright__browser_navigate({ url: "https://www.notion.so/page-id" })) and takes page snapshots/reads elements, thus ingesting user-generated, untrusted Notion page content that could carry indirect prompt injection.