bmad-agent-marketing-paid-ads

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow uses browser automation to visit competitor ad libraries and landing pages (via agent-browser), which exposes the agent to arbitrary outsider-authored web content.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The instruction in SKILL.md (and references/shared-patterns.md) instructs the agent to run npx skills add https://github.com/vercel-labs/agent-browser --skill agent-browser or npm install -g agent-browser during setup/runtime if agent-browser is not found, representing a remote operational dependency on an arbitrary GitHub repository with weak/unknown provenance.