bmad-agent-marketing-sostac

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's auto-discovery workflow (./references/auto-discovery.md and auto-discovery commands in SKILL.md) explicitly instructs the agent to open and scrape public third‑party sites — e.g., Google SERPs, Reddit, Quora, G2, Trustpilot, Meta Ad Library, competitor websites — and to read/use that untrusted, user‑generated content to drive research, recommendations, and next actions, which creates a clear vector for indirect prompt injection.