codex-app-mirror-installer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill documentation instructs the agent to read release metadata and issue/asset bodies from a specific GitHub repository (Wangnov/codex-app-mirror), which constitutes reading external repository content.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs downloading and executing application installers from a third-party Cloudflare R2 mirror (codexapp.agentsmirror.com) and an unverified personal GitHub repository (Wangnov/codex-app-mirror), constituting an unverifiable runtime external dependency under an unofficial source.