mimo2codex-proxy

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly routes Codex's web_search tool to MiMo's native web search and can be configured with external providers that have supportsWebSearch (see "Web Search" and "Adding Custom Providers" in SKILL.md), and it forwards upstream LLM responses (MiMo/DeepSeek/other public providers) — including tool/function calls like local_shell — into the agent workflow, so untrusted public web/search content can be ingested and materially influence actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The README contains installer commands that fetch and execute remote scripts (curl -fsSL https://raw.githubusercontent.com/7as0nch/mimo2codex/main/scripts/install.sh | bash and irm https://raw.githubusercontent.com/7as0nch/mimo2codex/main/scripts/install.ps1 | iex) and also documents cloning the repo (https://github.com/7as0nch/mimo2codex) which pull remote code that is executed during install—i.e., required external content that runs code locally.