bmad-creative-intelligence

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's research workflow and references (resources/research-methods.md and scripts/research-sources.sh) explicitly direct the agent to use WebSearch/WebFetch and to gather information from public websites, competitor sites, review sites, Reddit/social media and other external sources as evidence that will be read and used to drive recommendations, exposing the agent to untrusted third‑party content that can influence actions.