recall

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The “recall” workflow ingests Codex task-history contents via the runtime steps “list current and archived tasks,” “read the matching tasks with read_thread,” and “Extract the same fields from every relevant task,” which explicitly includes outsider-authored free text from user-created/supplied task threads.