get-paid-for-ticket-sales
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the official 'ticketfairy' command-line utility from the npm registry.
- [COMMAND_EXECUTION]: The agent is provided with specific CLI commands to manage account authentication, brand selection, and event updates, such as 'ticketfairy auth status' and 'ticketfairy event update'. These operations are conducted through the vendor's own tooling.
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves task-specific instructions from an external documentation server.
- Ingestion points: Data is ingested via 'search_guides' and 'get_guide' tool calls to 'https://www.ticketfairy.com/docs/mcp'.
- Boundary markers: None explicitly specified in the skill instructions to delimit external content.
- Capability inventory: The skill possesses capabilities for CLI execution, network API requests, and event modification.
- Sanitization: The agent relies on content fetched directly from the official Ticket Fairy documentation portal.
Audit Metadata