codex-plan-logs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow reads saved run artifacts from the target repository’s .git/codex-plan-loop/ (e.g., final-summary.json, *.transcript.log, *.jsonl) via codex-plan-log ..., which are outsider-authored free-form text if the repo/run files were not authored by the operating user.