bmad-checkpoint-preview

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Runtime path: on activation the workflow may load workflow.persistent_facts where entries prefixed with file: are read from {project-root} (including user-supplied project content in the working directory), so outsider-authored text could be ingested if it reaches those files/facts.