pp-sncf-connect

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow is executing the sncf-connect-pp-cli binary (read-only) which fetches data from the external Navitia API; that upstream JSON/text is ingested into the agent context via the CLI’s --agent/--json stdout output, making it an outsider-authored source (public API responses).