career-ops-plugin-notion

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required runtime workflow node plugins.mjs run notion search "<query>", the agent reads free-text records from a user’s Notion “Applications” database via client.findRecords() → queryDB() → summarize() (company/role/status/url are ingested from Notion pages), and Notion page content can be outsider-authored by anyone with access to that database.