resume-foreign-session

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads local JSONL/SQLite log files and session transcripts generated by various foreign coding agents (Claude Code, Codex, Cursor, etc.) from disk; these files contain untrusted history and user input written by external sessions, introducing indirect prompt injection risk via monitored local session stores.