tmux

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow reads tmux pane/session history via tmux capture-pane (e.g., scripts/wait-for-text.sh and the doc’s monitor commands), which contains free text produced by whatever program/user is running inside that pane, so an outsider who can cause that content to appear in the monitored pane can inject it indirectly.