ticketmaster
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using
npx @useclawlink/clito interact with Ticketmaster.\n- [CREDENTIALS_UNSAFE]: Following authentication, the tool stores credentials in the local filesystem at~/.clawlink/credentials.json.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external Ticketmaster listings, creating a surface for indirect prompt injection attacks.\n - Ingestion points: Event descriptions, venue details, and ticket data fetched via the CLI tool.\n
- Boundary markers: Absent; there are no instructions provided to the agent to treat external data as untrusted or to use specific delimiters.\n
- Capability inventory: The skill has the ability to execute shell commands and modify Ticketmaster data based on agent reasoning.\n
- Sanitization: No sanitization or validation protocols are defined for the incoming external data.
Audit Metadata