codex-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow invokes codex ... exec review with the review target content supplied via either (a) piped diffs (git diff ... | codex ... exec) or (b) PR patch text (gh pr diff ... | codex ... exec), meaning outsider-authored repository/PR content can be fed as <stdin>/prompt text into the LLM context.