pp-art-goat

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow is executing the local art-goat-pp-cli binary with --agent, which fetches curated museum/astronomy content from external sources (e.g., APOD/Smithsonian/Rijksmuseum/Te Papa) and injects that fetched free-text into the CLI’s JSON output that the agent then reads into LLM context.