update-codex

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Required workflow step 1 downloads appcast.xml and then downloads/extracts the newest upstream enclosure (e.g., Codex-darwin-arm64-<version>.zip or DMG) from https://persistent.oaistatic.com/... at runtime; the extracted Info.plist/app.asar contents are then read/processed by the scripts and thus can introduce outsider-authored free text into the agent/LLM context via those artifact contents.