solve-ticketing-problems
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the official
ticketfairycommand-line interface from the NPM registry. - [COMMAND_EXECUTION]: The skill utilizes shell commands via the
ticketfairyCLI to perform administrative tasks, such as authenticating accounts, selecting brands, and retrieving event performance statistics. - [INDIRECT_PROMPT_INJECTION]: The skill has an architectural surface for indirect prompt injection because it retrieves and follows instructions from an external documentation server.
- Ingestion points: Documentation is ingested via the
search_guidesandget_guidetools from the MCP server hosted athttps://www.ticketfairy.com/docs/mcp. - Boundary markers: The instructions do not specify any delimiters or safety markers to help the agent distinguish between the developer's core instructions and potentially malicious content within the external guides.
- Capability inventory: The agent can execute shell commands through the
ticketfairyCLI and perform account-level operations using various MCP tools. - Sanitization: There is no description of content sanitization or validation for the data returned by the external documentation server.
Audit Metadata