auto-tmux

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Runtime LLM context can include outsider-authored free text from tmux pane output: auto-tmux.sh capture/inspect/scan/snapshot reads arbitrary pane text via tmux capture-pane (and remote-readonly.sh via SSH tmux capture-pane) and prints it to stdout/stderr, which the agent can then incorporate into its LLM context.