pp-uk-train-goat

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.72). The required workflow is “Direct Use” of the uk-train-goat-pp-cli commands, which call the National Rail OpenLDBWS API for live departures/arrivals/journey planning; that runtime-fetched free-form text from an external service can be ingested into the agent’s LLM context via --agent JSON output (e.g., delay/cancel reasons, operator alerts, service details).