manage-events-with-the-cli
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the official
ticketfairypackage from the NPM registry to enable event management capabilities. - [COMMAND_EXECUTION]: The skill uses the
ticketfairycommand-line interface to perform account management, event configuration, and data retrieval tasks. It includes safety recommendations such as using--dry-runand--non-interactiveflags to ensure predictable behavior. - [INDIRECT_PROMPT_INJECTION]: The skill describes functionality where the agent processes external data files, creating an attack surface for instructions embedded in data.
- Ingestion points: Data is read from external files via flags such as
--from-file event.jsonand--from-csv guests.csvinSKILL.md. - Boundary markers: The instructions do not define specific delimiters or "ignore instructions" wrappers for the content of these files when the agent processes them.
- Capability inventory: The CLI tool can perform network API requests to the Ticket Fairy platform, write files (e.g., via the
--file orders.csvflag), and modify account resources. - Sanitization: There are no explicit instructions for the agent to sanitize or validate the content of the ingested files before execution.
Audit Metadata