auto-tmux

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.72). Required workflow includes capturing pane output via scripts/auto-tmux.sh capture/inspect/scan (which reads arbitrary text from tmux panes at runtime) and then printing/using that text for context; since pane contents are outsider-authored (other processes/users on those panes), this can feed free text into the agent’s LLM context.