codex-theme-installer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow downloads a theme package from codexthemes.ai and ingests its free-form JSON fields (notably readme and css) via response.text() → JSON.parse(responseText) → installPackage()/fs.writeFile, which can include attacker-controlled text; this is outsider-authored content from a public web source.