search-it-bulk-by-codex

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The workflow runs codex --search ... exec for each question, and Codex’s native web search at runtime fetches public web pages/contents (outsider-authored free text) that are ingested into the agent’s LLM context to answer the question.