council-multi-model

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The council extension builds a review packet from (untrusted) embedded disagreement/draft text and then passes that outsider-authored free text via stdin into scripts/review-with-codex.js (which forwards it to the Codex CLI), so an outsider can supply poison content through the workflow’s earlier step and have it ingested without selecting a specific item.