pp-uk-train-goat
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the
uk-train-goat-pp-clibinary from the author's resources usingnpx -y @mvanhorn/printing-press-libraryandgo install github.com/mvanhorn/printing-press-library/.... Both sources are consistent with the author's vendor infrastructure. - [COMMAND_EXECUTION]: The skill relies on shell command execution for both its installation process and its primary operations, which are conducted through the
uk-train-goat-pp-clibinary. - [DATA_EXFILTRATION]: The CLI tool contains a
--deliver webhook:<url>feature that enables command output to be sent to arbitrary external URLs. It also includes a feedback mechanism that can transmit data to a remote endpoint if theUK_TRAIN_GOAT_FEEDBACK_ENDPOINTenvironment variable is defined. - [INDIRECT_PROMPT_INJECTION]: The skill processes live data retrieved from the National Rail OpenLDBWS API and local datasets.
- Ingestion points: Live rail data from the National Rail OpenLDBWS API and the RJFAF static fares feed in the SKILL.md and referenced internal scripts.
- Boundary markers: The skill promotes the use of the
--agentflag to enforce structured JSON output, which helps maintain data boundaries. - Capability inventory: The tool possesses capabilities for network communication (API calls, webhooks) and file system interactions (local SQLite store, file delivery).
- Sanitization: The CLI tool acts as a structured wrapper for the raw API data, providing a layer of processing before the data reaches the agent context.
Audit Metadata