claude-code-agent-monitor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime, the skill’s required hook workflow reads Claude Code hook JSON from stdin (which can include outsider-supplied free text in fields like toolName/metadata) and forwards it to the server where it is stored/broadcast via POST /api/events and WebSocket.