codex-theme-switcher

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow injects textSamplerSource into Codex pages via CDP Runtime.evaluate, and that in-page script collects textContent from whatever page content is currently loaded (outsider-authored user/chat content), which is then parsed and used to build JSON results in the tool/agent context.