ops-orbit-plotter

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/plot_orbits.py, outsider-supplied free text for --station is passed as an untrusted identifier into resolve_ground_station() which invokes ops-ground-stations-catalogue with lookup <identifier> and then json.loads(proc.stdout)—so the workflow ingests free text from the user into the subprocess-driven lookup path at runtime.