bmad-eval-runner

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow executes evaluation cases and trigger queries supplied by test authors (who are potential outsiders when evaluating untrusted skills or community test suites), feeding outsider-authored free text inputs into the agent invocation and trigger loop.