idea-validator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime workflow ingests the outsider-provided free text passed as --idea/--market from the user and interpolates it into the generated Markdown reports (e.g., generate_mvp_report uses idea in report), without any prior selection step (and web research is gated behind a TODO flag that is not implemented).