ops-f36-plant

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In run.sh, the required workflow reads free text from the local clipboard/keyboard for --part-id (via xclip -o or zbarcam/read in scan-barcode) and then passes it to composed skills like quality-audit, batch-quality, agent-inbox, and review-pdf as runtime arguments.