Hook Development

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow ingests free text from outsiders via hook event fields like user_prompt (UserPromptSubmit) and tool_input/tool_result (PreToolUse/PostToolUse), which are then passed into prompt-based hooks as ... $USER_PROMPT, $TOOL_INPUT, or $TOOL_RESULT for LLM evaluation.