connect-organiser-account
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection as it ingests data from external API endpoints.
- Ingestion points: Data is retrieved from the Ticket Fairy API, specifically via endpoints like
https://www.theticketfairy.com/api/v1/agent/identityand event setup/sales data endpoints. - Boundary markers: The skill includes a clear human-in-the-loop requirement, instructing the agent to "Show the person what you will create or copy before you send it."
- Capability inventory: The agent has the capability to perform write operations (creating events, copying setups) and network requests to the vendor's API.
- Sanitization: While specific data sanitization logic is not detailed, the instructions mandate user verification of any proposed actions.
- [COMMAND_EXECUTION]: The skill mentions using the
ticketfairycommand-line interface (CLI). This is a tool provided by the vendor for account management. - [EXTERNAL_DOWNLOADS]: The skill references the
ticketfairyNPM package and several official Ticket Fairy domains (e.g.,ticketfairy.com,theticketfairy.com) for API interactions and authentication. These resources are consistent with the vendor's infrastructure.
Audit Metadata