bmad-founder-agent-advisor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Outsider-authored text reaches the agent only when the agent or founder selects it: web pages fetched by bmad-deep-recon for research and meeting prep, and investor emails or call notes the founder hands over for intake. Nothing monitors an inbox or feed that outsiders can post into.