cmux

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill’s required runtime workflow can read and type into surfaces via cmux rpc surface.read_text / cmux read-screen and drive an “agent TUI” by pasting/typing text into an existing surface, but the provided workflow guidance does not include any step where outsider-authored free text is ingested without the caller selecting a specific surface/workspace.