notion-api

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md integration example "github_notion.py" clearly fetches public GitHub issues from https://api.github.com/repos/{repo}/issues and ingests issue bodies/labels to create or update Notion pages, so the agent would read untrusted, user-generated third‑party content that can materially drive tool actions.