prd-starter-configurator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md explicitly assigns MCP servers such as "web-search-prime" (web search) and "playwright" (browser automation) in Phase 4 default MCP mappings and the Phase 6 MCP server list, meaning agents are expected to fetch and interpret public web content that could carry untrusted instructions.