ops-ground-stations-catalogue

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime path scripts/manage_ground_stations.py ingests outsider-authored free text via the CLI argument lookup <identifier> / _parse_coords(identifier) and can persist attacker-supplied strings into custom_ground_stations.json via add --name/--alias, meaning the agent will process arbitrary text provided by the user without selecting a specific trusted item first.