paneflow-conductor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md describes runtime ingestion of peer pane scrollback via paneflow read / paneflow status ... --json (including last_result), which is outsider-authored free text from other agents’ outputs and is explicitly treated as untrusted data that the conductor would feed into its LLM context.