ambient-context

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow drains queued event files from ~/.claude/events/*.event into the next Claude Code session via the session-start hook (hooks/session-start-hook.sh → hooks/drain-events.sh), and those event files can be created from outsider-authored free text (e.g., CI/webhook payloads, calendar/Slack/Discord/email messages, or manual claude-external-event messages from other people), which then becomes LLM-readable context.