route

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Outsider-authored free text is ingested directly as the user-provided “prompt” argument to scripts/route.mjs run/launch, which is then forwarded to the Codex worker via either the plugin companion (task --background … <prompt>) or the bare CLI (codex "$@" … -- <prompt>), without any intermediary selection of trusted items.