orchestrator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required workflow routes “external context intake” and forwards “source links, external notes, blockers” into child threads via codex_app.send_message_to_thread, which can include outsider-authored free text gathered at runtime (e.g., from public web content or other users’ messages).