debug-plugins

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow reads /tmp/claude-command and /tmp/claude-code.log (both generated from the user’s configured plugin/skill environment) and inspects plugin zips from /mnt/account-plugins/, whose contents are authored by whoever built/configured the deployment (outsider text) and can be ingested as readable text during log/zip inspection.