bmad-agent-product-marketing-context
Warn
Audited by Snyk on Apr 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs the agent to use and audit live public URLs and user-generated sources (see "Context C — Live Website URL Audit" in references/shared-patterns.md and the "Live URL or public presence" line in references/check-existing.md, plus document-template §9 referencing reviews/Reddit/Twitter), meaning the agent will fetch and interpret untrusted third-party content that can influence its recommendations and actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata