claude-agents

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow reads outsider-authored transcript content from $PROJECTS_DIR/*/<sessionId>.jsonl (each line’s message.content blocks) and feeds it into the agent for summarization, which can include free text written by prior/other users inside that session.