bmad-agent-marketing-agency

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's Context Router explicitly instructs the agent to "audit live presence first" when the user provides a website, landing page, store, or social/profile URL (references/context-router.md and SKILL.md), which means the agent will fetch and read open/public third‑party pages and use that content to drive routing and decisions.