warp

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow for /warp SSHes to a remote node and runs tmux list-sessions / tmux attach-session via ssh, which can ingest outsider-authored free text from the remote host’s tmux output and interactive session content into the agent’s LLM context (remote user/terminal output is not authored by the operating user).