harvest-sessions

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads locally stored Claude Code/Codex session transcripts from ~/.claude/projects and ~/.codex/sessions|archived_sessions and ingests their human turns via scripts/digest_sessions.py (including --only), so an outsider can influence the free text by authoring/publishing those sessions in the user’s environment before the tick runs.