bmad-spec
Warn
Audited by Snyk on Sep 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The workflow takes user-provided ideas, PRDs, transcripts, or notes (which can include customer emails and Slack threads) and distills them into specs, exposing the agent to potentially untrusted free text input.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata