bmad-agent-marketing-social

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's Starting Context Router and Pre-Flight (in SKILL.md) plus shared-patterns.md explicitly instruct the agent to audit user-provided live URLs and use agent-browser/WebFetch for live competitor research, meaning the agent will fetch and interpret arbitrary public web content as the working source of truth.