continuous-learning

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The Stop hook runs evaluate-session.sh, which reads a session transcript_path from hook stdin and then counts user messages by grepping the transcript file; that transcript is outsider-authored free text (other participants’ messages) that becomes LLM-readable context for evaluation/extraction.