event-venue-leads
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the user to add an MCP tool via the command:
claude mcp add --transport http manypi https://mcp.manypi.com/mcp -s user. This action integrates external tool functionality into the agent context. - [EXTERNAL_DOWNLOADS]: The tool configuration is fetched from a remote server at
https://mcp.manypi.com/mcp. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external websites and directories.
- Ingestion points: Venue-finding platforms, licensing registers, and event listings (SKILL.md).
- Boundary markers: None defined.
- Capability inventory: The manypi tool provides the capability to query and process these sources.
- Sanitization: No explicit validation or filtering of external data is described.
Audit Metadata