tmux

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). Required workflow uses tmux capture-pane to read pane scrollback/output (free-form text produced by whatever is running in the tmux session, i.e., potentially outsider-authored content) and then that text is returned to the agent via stdout/variables like pane_text.