session-handoff

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill reads past session transcripts and checkpoints via local CLI commands (entire), which store logs of previous agent and user interactions. Since these logs contain user-supplied and external inputs from prior sessions that the agent processes, it presents an indirect prompt injection risk via session history.