idea-validator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's Phase 4 research delegation explicitly instructs spawned agents to use WebSearch and ingest data from open/public third-party sources (e.g., "industry reports", "Product Hunt, G2, Capterra, Crunchbase, and company sites") as required inputs to the market, competitive, and feasibility analyses that directly influence scoring and next actions, creating a clear vector for indirect prompt injection.