herdr-agent-comms

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Phase 5/6 of SKILL.md calls scripts/wait_for_idle.py which reads the Herdr pane transcript via herdr pane read --source recent-unwrapped (capturing free-form agent output) and then compares/deltas it, meaning outsider-authored pane text can be ingested at runtime.