claude-memory-curator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads user/tenant-owned Claude durable surfaces by scanning local files at runtime (e.g., plan-run-cleanup-file always runs node scripts/inventory-claude-memory.mjs and node scripts/scan-claude-memory-risks.mjs which fs.readFileSync and line-scan the contents of repo/Claude-home/rules/memory markdown), so outsider-authored free text submitted via those files is ingested.