setup-statusline

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow for setup-statusline reads free-form JSON only from cat on STDIN inside scripts/statusline-command.sh and scripts/statusline-reset-hook.sh, so any outsider-authored text that reaches those STDIN sources (i.e., monitored/produced runtime metrics events) could be ingested by the LLM via jq parsing.