oce-field-ops

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill describes required runtime workflows as creating and updating site punch list, daily diary, HSE observations, and task tracking via the OpenConstructionERP API (e.g., POST/PATCH/GET to module endpoints), with the agent consuming outsider-authored field inputs such as inspector/contractor text entries and incident/observation details.