connect-ticketfairy-integrations
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
ticketfairyCLI for account status checks, brand listing, and starting an MCP server. These are standard operations for managing the vendor's platform. - [EXTERNAL_DOWNLOADS]: The instructions direct the installation of the
ticketfairypackage via npm (npm install -g ticketfairy). This is a legitimate tool provided by the skill author for account management. - [INDIRECT_PROMPT_INJECTION]: The skill retrieves documentation and guides dynamically from the vendor's API (
https://www.ticketfairy.com/docs/mcp) using theget_guideandsearch_guidestools. - Ingestion points: Data is ingested through the
get_guidetool from the vendor's official documentation endpoint. - Boundary markers: None explicitly defined in the instructions for the ingested content.
- Capability inventory: The agent has the capability to execute CLI commands and perform network operations via the vendor's tools.
- Sanitization: No specific sanitization or filtering of the remote guide content is mentioned before processing.
Audit Metadata