codex-issue-coordinator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). This skill’s required runtime workflow ingests outsider-authored free text by reading arbitrary GitHub issue/PR content (“Read the repository instructions, parent issue, native sub-issues, declared dependencies, project board, issue state, and linked open or merged pull requests” and “Each worker…Read the issue, repository instructions… and dependency pull requests”), which is attacker-controlled via posts to issues/PRs.