answer-ticketfairy-questions

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes content fetched from external Ticket Fairy guides, which serves as an ingestion point for untrusted data. * Ingestion points: Data enters the context through the search_guides and get_guide tools which query the vendor domain ticketfairy.com. * Boundary markers: The skill includes specific instructions to quote the guides and follow a structured answering process. * Capability inventory: The skill tools are read-only and restricted to documentation retrieval. * Sanitization: No explicit sanitization or filtering of the guide content is defined in the skill instructions.
  • [EXTERNAL_DOWNLOADS]: Fetches guide information from the official vendor endpoint at https://www.ticketfairy.com/docs/mcp using the MCP protocol.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 05:35 PM