OpenAI’s page is a setup guide, not a vulnerability writeup. It shows the Desktop Codex path for adding the Codex Security plugin, choosing a project folder, and sending a prepared scan prompt, which makes the trust boundary around local code access worth noticing.