pm-lead

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). Yes — Stage 2 (Competitive Research) explicitly requires using third-party data sources such as product pages, changelogs, analyst reports and "community discussion" (references/research-frameworks.md and the Stage 2 checklist), which the workflow expects the agent to read and use to drive decisions across ideation, PRDs, roadmaps, and proposals.