solve-ticketing-problems

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the official ticketfairy command-line interface from the NPM registry.
  • [COMMAND_EXECUTION]: The skill utilizes shell commands via the ticketfairy CLI to perform administrative tasks, such as authenticating accounts, selecting brands, and retrieving event performance statistics.
  • [INDIRECT_PROMPT_INJECTION]: The skill has an architectural surface for indirect prompt injection because it retrieves and follows instructions from an external documentation server.
  • Ingestion points: Documentation is ingested via the search_guides and get_guide tools from the MCP server hosted at https://www.ticketfairy.com/docs/mcp.
  • Boundary markers: The instructions do not specify any delimiters or safety markers to help the agent distinguish between the developer's core instructions and potentially malicious content within the external guides.
  • Capability inventory: The agent can execute shell commands through the ticketfairy CLI and perform account-level operations using various MCP tools.
  • Sanitization: There is no description of content sanitization or validation for the data returned by the external documentation server.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 05:38 PM