bmad-prd
Warn
Audited by Snyk on Sep 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The workflow allows web research and external tool consulting during Discovery, but ingestion of external content is mediated via subagents or active searches without an unprompted outsider input feed.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata