lanes

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/lane-launcher.sh, outsider-controlled free text is read only from files referenced by --config/$CLAUDE_OPS_LANES_CONFIG/<repo>/.work/lanes.json via lanes[].prompt, then the launcher ingests that prompt text with prompt="$(cat "$prompt_path")" and passes it to claude --bg ... "<prompt>" without requiring the outsider to submit a specific item through the workflow UI first.