bmad-domain-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill explicitly requires live web searches and ingestion of public web content (e.g., "⛔ Web search required" in SKILL.md and repeated mandates like "Search the web: "{{research_topic}} market size value"" and "Always cite URLs" in domain-steps/step-02-domain-analysis.md), so it will read and act on untrusted third-party pages that can materially influence decisions.