collab-canvas

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Runtime text ingestion via collab-canvas terminal read <id> returns raw PTY ring-buffer output from a terminal tile, where an outsider could potentially cause the terminal to receive/emit attacker-authored free text (e.g., by running a command that prints it).