semester-handoff

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Runtime loads per-case ~/.claude/plugins/config/claude-for-legal/legal-clinic/client-comms/[case-id]/log.md and summarizes it into the LLM context; this file is outsider-authored free-form communications history (authored by others than the operating user, e.g., client/opposing counsel) and is ingested as readable prose.