find-event-tickets
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill instructs the assistant to interact solely with official Ticket Fairy domains (ticketfairy.com) for event discovery and ticket details. All network operations are directed at the vendor's own infrastructure.
- [SAFE]: The skill explicitly mandates that the assistant must not request, collect, or transmit sensitive user data such as credit card numbers, passwords, or authentication tokens, directing all financial transactions to be handled by the user's browser.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies surfaces where external data is ingested (event listings from API and MCP/A2A responses), but limits the processing to specific fields like event names and dates, and provides clear instructions on preserving the integrity of the buyer's original request.
- Ingestion points: SKILL.md (REST API listing, MCP search_events, A2A message results)
- Boundary markers: None explicitly defined for the external data content
- Capability inventory: HTTP network operations (GET/POST), markdown/HTML parsing, and browser URL opening
- Sanitization: Not explicitly mentioned, though the skill relies on browser-based checkout for security-critical actions.
Audit Metadata