career-ops-plugin-notion
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external Notion records which could contain malicious instructions designed to influence the agent's behavior.\n
- Ingestion points: The skill retrieves data from the Notion API via the
queryDBfunction in_notion.mjswhich is used by thesearchhook inindex.mjs.\n - Boundary markers: There are no explicit markers or instructions to isolate external data from the prompt context.\n
- Capability inventory: The skill can perform authenticated network requests to Notion and write to Notion databases via POST and PATCH requests, but lacks shell access or local file system write capabilities.\n
- Sanitization: The skill performs basic URL validation using regular expressions to ensure job links use HTTP or HTTPS protocols.
Audit Metadata