run-event-workflows
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the official vendor CLI tool via
npm install -g ticketfairy. This is an expected installation step for the platform's utility as provided by the skill author. - [COMMAND_EXECUTION]: The skill provides specific command-line instructions for the
ticketfairyCLI to perform actions like event cloning, status checking, and publishing. These commands are specific to the vendor's tooling and are used for their intended purpose. - [INDIRECT_PROMPT_INJECTION]: The skill utilizes tools (
search_guides,get_guide) to ingest documentation content from the vendor's site. - Ingestion points: External guide content retrieved via the MCP endpoint
https://www.ticketfairy.com/docs/mcpas defined inSKILL.md. - Boundary markers: No explicit delimiters or warnings are used for the documentation content.
- Capability inventory: System interaction via the
ticketfairyCLI, including event cloning and configuration. - Sanitization: No explicit sanitization of the guide content is mentioned before processing.
Audit Metadata