skill-session-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow reads local user session logs from Claude, Grok, Codex, and Oh My Pi (~/.claude/projects, ~/.grok/sessions, etc.), which contain outsider-authored free text (such as user queries and prompt injections) without the agent first selecting a specific item.