prompt-driven-development

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly accepts a URL for the required rough_idea parameter and its Step 4 (Research) in SKILL.md instructs the agent to check specific external resources and document findings, meaning the agent will ingest and interpret arbitrary third‑party web content that can influence design decisions and subsequent actions.