find-handoff

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill ingests assistant-generated transcript JSONL from ~/.claude/projects/*/ at runtime (bounded grep + per-line unescaping, then matching rails/file directives) and also reads candidate handoff files from local handoffs/ directories, all of which can include outsider-authored free text if an outsider previously caused that content to be written into the transcript.