codex-configuration

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly can download and run third-party skills from public GitHub via the $skill-installer and can enable web searches (--search), and its MCP server configuration may pull npm packages with npx, all of which ingest untrusted public content that the agent may read and execute.