search-it-bulk-by-codex

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.78). SKILL.md mandates codex --search ... exec and the subagents read the generated question/prompt files, but the runtime LLM context can include browser-extracted/snippet text from OUTSIDER-authored public web pages returned by --search, which can carry indirect prompt-injection.