tui-migrate-setup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Source migration reads outsider-authored free text from host file paths passed as --source into the runtime inspection helpers scripts/inspect_shared_settings.py (TOML/JSON parsing and selection) and scripts/merge_mcp_config.py (JSON MCP config parsing), without requiring any prior agent-side item selection beyond the paths provided by the workflow.