bmad-market-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The workflow repeatedly and mandatorily requires live web searches and ingestion of external URLs (e.g., steps/step-02-customer-behavior.md, step-03-customer-pain-points.md, step-04-customer-decisions.md, step-05-competitive-analysis.md, and step-06-research-completion.md all state "WEB SEARCH REQUIRED" and "Always cite URLs"), so the agent will fetch and act on untrusted public web content that can change analysis and next actions.