validate-idea

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill instructs the agent to read user-provided files, PRDs, pitches, surveys, or interview notes in Step 1, exposing it to indirect prompt injection from untrusted inputs.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill is an idea-validation and product-strategy guide drawing on podcast insights, which discusses concepts like pricing conversations, pre-orders, and $1 invoices for testing willingness to pay (SKILL.md:34, SKILL.md:63). This constitutes indirect financial operations (planning/testing billing or payment signals for validation purposes), and no direct payment execution is performed.