answer-ticketfairy-questions
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes content fetched from external Ticket Fairy guides, which serves as an ingestion point for untrusted data. * Ingestion points: Data enters the context through the
search_guidesandget_guidetools which query the vendor domainticketfairy.com. * Boundary markers: The skill includes specific instructions to quote the guides and follow a structured answering process. * Capability inventory: The skill tools are read-only and restricted to documentation retrieval. * Sanitization: No explicit sanitization or filtering of the guide content is defined in the skill instructions. - [EXTERNAL_DOWNLOADS]: Fetches guide information from the official vendor endpoint at
https://www.ticketfairy.com/docs/mcpusing the MCP protocol.
Audit Metadata