Master BP Reviewer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly requires the agent to "read all provided documents" (use the Read tool) and to base investment decisions and a full BP rewrite on user-provided pitch decks/BPs (e.g., "User: 'Review this pitch deck: docs/my-startup-pitch-deck.pdf'"), so it ingests arbitrary/untrusted user-generated documents whose content directly drives decisions and actions, enabling indirect prompt injection.