career-ops-plugin-notion

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). Notion API responses (outsider-authored page/DB content in the user’s Notion workspace) are fetched at runtime via fetchFn(...) and then transformed/returned to the pipeline in search (_notion.mjs:71-79, findRecords/queryDB then index.mjs:105-112), which can introduce arbitrary Notion-authored strings into the agent context.