tmux-agent-comms

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Phase 5 (and also Phase 4/4’s error-path) calls tmux capture-pane ... -p -S -40, then the helper scripts print that captured pane text (agent reply/deltas and sometimes blocked-dialog content) to stdout; that stdout is then relayed into the agent’s conversation context, so any outsider-controlled text visible in the tmux pane can become LLM context.